github.com/mudler/LocalAI vulnerabilities (Go)

3 vulnerabilities.

• github.com/mudler/LocalAI Go LocalAI - Server-Side Request Forgery via POST /models/apply CVE-2026-59707 Fix available 9.2 CriticalJuly 7, 2026
• github.com/mudler/LocalAI Go Cross-Site Scripting (XSS) in mudler/localai CVE-2024-9900 Fix available 5.4 MediumMarch 20, 2025
• github.com/mudler/LocalAI Go LocalAI Cross-site Scripting vulnerability CVE-2024-48057 Fix available 6.1 MediumNovember 4, 2024