Go/github.com/go-skynet/LocalAI CVE-2024-3135: medium 6.5, EPSS 0.31%
LocalAI cross-site request forgery vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.7.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-jhvf-7c85-3c9g
- https://nvd.nist.gov/vuln/detail/CVE-2024-3135
- https://github.com/mudler/LocalAI
- https://huntr.com/bounties/7afdc4d3-4b68-45ea-96d0-cf9ed3712ae8
CVE-2024-3135 · published · modified · JSON