https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:31:45 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-227065 EUVD-2026-227065 https://cve.radiocsirt.org/vuln/euvd-2026-227065 https://cve.radiocsirt.org/vuln/fkie_cve-2024-9900 <p>mudler/localai version v2.21.1 contains a Cross-Site Scripting (XSS) vulnerability in its search functionality. The vulnerability arises due to improper sanitization of user input, allowing the injection and execution of arbitrary JavaScript code. This can lead to the execution of malicious scripts in the context of the victim&#39;s browser, potentially compromising user sessions, stealing session cookies, redirecting users to malicious websites, or manipulating the DOM.</p> <p>mudler/localai version v2.21.1 contains a Cross-Site Scripting (XSS) vulnerability in its search functionality. The vulnerability arises due to improper sanitization of user input, allowing the injection and execution of arbitrary JavaScript code. This can lead to the execution of malicious scripts in the context of the victim&#39;s browser, potentially compromising user sessions, stealing session cookies, redirecting users to malicious websites, or manipulating the DOM.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-9900 https://cve.radiocsirt.org/vuln/ghsa-w6hh-w36c-vxmw <p><strong>Affected:</strong> Go: github.com/mudler/LocalAI</p> <p>mudler/localai version v2.21.1 contains a Cross-Site Scripting (XSS) vulnerability in its search functionality. The vulnerability arises due to improper sanitization of user input, allowing the injection and execution of arbitrary JavaScript code. This can lead to the execution of malicious scripts in the context of the victim&#39;s browser, potentially compromising user sessions, stealing session cookies, redirecting users to malicious websites, or manipulating the DOM.</p> <p><strong>Affected:</strong> Go: github.com/mudler/LocalAI</p> <p>mudler/localai version v2.21.1 contains a Cross-Site Scripting (XSS) vulnerability in its search functionality. The vulnerability arises due to improper sanitization of user input, allowing the injection and execution of arbitrary JavaScript code. This can lead to the execution of malicious scripts in the context of the victim&#39;s browser, potentially compromising user sessions, stealing session cookies, redirecting users to malicious websites, or manipulating the DOM.</p> https://cve.radiocsirt.org/vuln/ghsa-w6hh-w36c-vxmw https://cve.radiocsirt.org/vuln/opensuse-su-2025:14937-1 <p>govulncheck-vulndb-0.0.20250327T184518-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20250327T184518-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14937-1