Localai
1 CVEs
product
Monthly
mudler/localai version v2.21.1 contains a Cross-Site Scripting (XSS) vulnerability in its search functionality. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
XSS
Localai
Suse
NVD
GitHub
CVSS 3.1
6.1
EPSS
0.1%
EPSS 0%
CVSS 6.1
MEDIUM
POC
PATCH
This Month
mudler/localai version v2.21.1 contains a Cross-Site Scripting (XSS) vulnerability in its search functionality. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
XSS
Localai
Suse
NVD
GitHub