GHSA-8C5Q-HX4G-QQ23 LocalAI POST /models/apply permits unauthenticated server-side request forgery through gallery URLs

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper...

CVE-2026-59707 LocalAI - Server-Side Request Forgery via POST /models/apply

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper...

CVE-2026-59707

CVE-2026-59707 : LocalAI exposes an unauthenticated SSRF via POST /models/apply. The endpoint forwards unsanitized gallery URL fields to gallery.GetGalleryConfigFromURLWithContext, allowing requests to internal/private/loopback URLs and leaking partial responses in error messages. No exploitation...

CVE-2026-59707

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper...

CVE-2026-59707 LocalAI - Server-Side Request Forgery via POST /models/apply

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper...

CVE-2026-59707 LocalAI - Server-Side Request Forgery via POST /models/apply

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper...

faculty-models (0.2.0), mlflow-faculty (0.5.0) potentially affected by CVE-2025-10279 via mlflow (1.7.2)

mlflow PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - faculty-models 0.2.0 - mlflow-faculty 0.5.0 Source cves: CVE-2025-10279 Source advisory: OSV:PYSEC-2026-1639...

faculty-models (>=0.1.0, <=0.1.1), mlflow-faculty (>=0.4.0, <=0.4.3) potentially affected by CVE-2025-10279 via mlflow (1.2.0)

mlflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - faculty-models =0.1.0, =0.4.0, =0.4.3 Source cves: CVE-2025-10279 Source advisory: OSV:PYSEC-2026-1639...

femtocrux (0.2.2), meteva (>=1.7.3, <=1.8.0.1) +3 more potentially affected by CVE-2026-0994 via protobuf (3.20.0rc2)

protobuf PYPI version 3.20.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - femtocrux 0.2.2 - meteva =1.7.3, =0.1.0, =0.0.2, =0.5.2, =1.0.0a8 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

pypi-attestation-models (>=0.0.1rc2, <=0.0.1) potentially affected by CVE-2026-24408 via sigstore (3.0.0rc2)

sigstore PYPI version 3.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on sigstore and may be impacted: - pypi-attestation-models =0.0.1rc2, =0.0.1 Source cves: CVE-2026-24408 Source advisory: OSV:PYSEC-2026-1924...

pypi-attestation-models (0.0.1rc1) potentially affected by CVE-2026-24408 via sigstore (3.0.0rc1)

sigstore PYPI version 3.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on sigstore and may be impacted: - pypi-attestation-models 0.0.1rc1 Source cves: CVE-2026-24408 Source advisory: OSV:PYSEC-2026-1924...

pypi-attestation-models (>=0.0.2, <=0.0.5), pypi-attestations (>=0.0.6, <=0.0.9) potentially affected by CVE-2026-24408 via sigstore (3.0.0)

sigstore PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on sigstore and may be impacted: - pypi-attestation-models =0.0.2, =0.0.6, =0.0.9 Source cves: CVE-2026-24408 Source advisory: OSV:PYSEC-2026-1924...

agavepy (1.0.0a7), audolab (>=0.0.37, <=1.0.3) +10 more potentially affected by CVE-2025-71176 via pytest (4.6.5)

pytest PYPI version 4.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - agavepy 1.0.0a7 - audolab =0.0.37, =0.4.2, =2.0.0, =0.1.0, =0.8.0, =0.0.29, =0.0.40 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

faculty-models (>=0.1.0, <=0.1.1), mlflow-faculty (>=0.4.0, <=0.4.3) potentially affected by CVE-2025-14279 via mlflow (1.2.0)

mlflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - faculty-models =0.1.0, =0.4.0, =0.4.3 Source cves: CVE-2025-14279 Source advisory: OSV:PYSEC-2026-1656...

faculty-models (0.2.0), mlflow-faculty (0.5.0) potentially affected by CVE-2025-14279 via mlflow (1.7.2)

mlflow PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - faculty-models 0.2.0 - mlflow-faculty 0.5.0 Source cves: CVE-2025-14279 Source advisory: OSV:PYSEC-2026-1656...

arkindex-base-worker (>=0.3.1b1, <=0.3.1rc2), labext-pkg (2.2.0) +3 more potentially affected by CVE-2025-68142 via pymdown-extensions (9.5.0)

pymdown-extensions PYPI version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.1b1, =0.0.4, =0.0.130, =2023.11.4 - stuffpages 0.7.4 Source cves: CVE-2025-68142 Source advisory:...

faculty-models (0.2.0), mlflow-faculty (0.5.0) potentially affected by CVE-2025-11200 via mlflow (1.7.2)

mlflow PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - faculty-models 0.2.0 - mlflow-faculty 0.5.0 Source cves: CVE-2025-11200 Source advisory: OSV:PYSEC-2026-1642...

faculty-models (>=0.1.0, <=0.1.1), mlflow-faculty (>=0.4.0, <=0.4.3) potentially affected by CVE-2025-11200 via mlflow (1.2.0)

mlflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - faculty-models =0.1.0, =0.4.0, =0.4.3 Source cves: CVE-2025-11200 Source advisory: OSV:PYSEC-2026-1642...

faculty-models (>=0.1.0, <=0.1.1), mlflow-faculty (>=0.4.0, <=0.4.3) potentially affected by CVE-2025-11201 via mlflow (1.2.0)

mlflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - faculty-models =0.1.0, =0.4.0, =0.4.3 Source cves: CVE-2025-11201 Source advisory: OSV:PYSEC-2026-1640...

faculty-models (0.2.0), mlflow-faculty (0.5.0) potentially affected by CVE-2025-11201 via mlflow (1.7.2)

mlflow PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - faculty-models 0.2.0 - mlflow-faculty 0.5.0 Source cves: CVE-2025-11201 Source advisory: OSV:PYSEC-2026-1640...