CVE-2024-9900

Go/github.com/mudler/LocalAI CVE-2024-9900: medium 5.4

LocalAI Cross-Site Scripting (XSS) vulnerability in its search functionality

Action: Upgrade github.com/mudler/LocalAI to 2.22.0 or later.

go get github.com/mudler/LocalAI@v2.22.0

Affected

Fixed versions

Sources

• osv: GHSA-w6hh-w36c-vxmw
• https://nvd.nist.gov/vuln/detail/CVE-2024-9900
• https://github.com/mudler/localai/commit/a1634b219a4e52813e70ff07e6376a01449c4515
• https://github.com/mudler/LocalAI
• https://huntr.com/bounties/b39cd230-db66-471b-89b9-24afaa078e68

CVE-2024-9900 · published 2025-03-20T12:32:51Z · modified 2025-03-25T20:22:02.028631Z · JSON

Go/github.com/mudler/LocalAI CVE-2024-9900: medium 6.1

LocalAI Cross-Site Scripting (XSS) vulnerability in its search functionality in github.com/mudler/LocalAI

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2025-3542
• nvd: CVE-2024-9900
• https://github.com/advisories/GHSA-w6hh-w36c-vxmw
• https://github.com/mudler/localai/commit/a1634b219a4e52813e70ff07e6376a01449c4515
• https://huntr.com/bounties/b39cd230-db66-471b-89b9-24afaa078e68

CVE-2024-9900 · published 2025-03-25T19:38:11Z · modified 2025-03-25T20:22:02.028631Z · JSON