Vulnerabilities > Mudler > Localai > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-10-29 CVE-2024-7010 Information Exposure Through Discrepancy vulnerability in Mudler Localai 2.17.1
mudler/localai version 2.17.1 is vulnerable to a Timing Attack.
network
high complexity
mudler CWE-203
5.9
2024-07-06 CVE-2024-6095 Unspecified vulnerability in Mudler Localai
A vulnerability in the /models/apply endpoint of mudler/localai versions 2.15.0 allows for Server-Side Request Forgery (SSRF) and partial Local File Inclusion (LFI).
network
low complexity
mudler
5.8