GHSA-8C5Q-HX4G-QQ23 LocalAI POST /models/apply permits unauthenticated server-side request forgery through gallery URLs

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper...

LocalAI POST /models/apply permits unauthenticated server-side request forgery through gallery URLs

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper...

CVE-2026-48955

creationtimestamp| type| source ---|---|--- 2026-07-07 21:30:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3kgwhhbm2k 2026-07-08 14:15:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n...

@better-auth/sso provider registration has server-side request forgery via unvalidated OIDC endpoints

Am I affected? Users are affected if all of the following are true: - Their application uses @better-auth/sso at a version = 0.1.0, 1.6.11 on the stable line, or any 1.7.0-beta.x on the pre-release line. - The sso plugin is added to their application's betterAuth plugins: ... array. - Any user wi...

CVE-2026-48956

creationtimestamp| type| source ---|---|--- 2026-07-07 20:48:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3i3hz3pq27 2026-07-08 14:15:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n...

CVE-2026-50530 DataEase: Token with Overly Broad Privileges in Share Mode: Access to Unshared Datasets

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, a share mode chart data interface only validates that sceneId matches the resourceId in the link token and fails to validate whether tableId and field IDs in the request body belong to the shared resource, allowing...

CVE-2026-50530 DataEase: Token with Overly Broad Privileges in Share Mode: Access to Unshared Datasets

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, a share mode chart data interface only validates that sceneId matches the resourceId in the link token and fails to validate whether tableId and field IDs in the request body belong to the shared resource, allowing...

CVE-2026-59707

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper...

CVE-2026-59707

CVE-2026-59707 : LocalAI exposes an unauthenticated SSRF via POST /models/apply. The endpoint forwards unsanitized gallery URL fields to gallery.GetGalleryConfigFromURLWithContext, allowing requests to internal/private/loopback URLs and leaking partial responses in error messages. No exploitation...

CVE-2026-59707 LocalAI - Server-Side Request Forgery via POST /models/apply

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper...

CVE-2026-48947

creationtimestamp| type| source ---|---|--- 2026-07-07 20:37:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3hi2txei2i 2026-07-08 14:15:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n...

CVE-2026-23697

creationtimestamp| type| source ---|---|--- 2026-07-07 19:58:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3fcys7xx2w 2026-07-10 17:49:13+00:00| seen| https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mqcphwfowu2j 2026-07-13 22:00:10+00:00| seen|...

CVE-2026-23698

creationtimestamp| type| source ---|---|--- 2026-07-07 19:53:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3f22eb4o2u 2026-07-13 22:00:10+00:00| seen| https://t.me/GithubRedTeam/92380 2026-07-14 00:00:18+00:00| seen| https://t.me/GithubRedTeam/92380 2026-07-15 00:00:31+00:00|...

CVE-2026-59800

creationtimestamp| type| source ---|---|--- 2026-07-07 19:33:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3dwalhqt22 2026-07-07 20:35:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-g6g7-pvmx-m74p 2026-07-07 20:52:05+00:00| seen|...

CVE-2026-13020

creationtimestamp| type| source ---|---|--- 2026-07-07 19:25:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3dhu46ku2f 2026-07-09 15:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq7vo4wlz32b 2026-07-21 23:07:06+00:00| seen|...

CVE-2026-13019

creationtimestamp| type| source ---|---|--- 2026-07-07 17:36:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq35do63e62b 2026-07-07 19:48:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3er3vied2z 2026-07-08 12:14:06+00:00| seen|...

CVE-2011-10043

creationtimestamp| type| source ---|---|--- 2026-07-07 17:34:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq35a4wvad2x 2026-07-07 19:38:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3e7727ll2z 2026-07-08 11:00:04+00:00| seen|...

CVE-2021-20102

creationtimestamp| type| source ---|---|--- 2026-07-07 16:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq2yeliqdm24...

AIOHTTP vulnerable to denial of service through large payloads

SummaryA request can be crafted in such a way that an aiohttp server's memory fills up uncontrollably during processing. ImpactIf an application includes a handler that uses the Request.post method, an attacker may be able to freeze the server by exhausting the memory.-----Patch:...

PYSEC-2026-1100 AIOHTTP vulnerable to denial of service through large payloads

Summary A request can be crafted in such a way that an aiohttp server's memory fills up uncontrollably during processing. Impact If an application includes a handler that uses the Request.post method, an attacker may be able to freeze the server by exhausting the memory. ----- Patch:...