Vulnerabilities
Check LocalAI Gallery Settings to Stop Server-Side Request Forgery Attack
Critical flaw in LocalAI versions allows attackers to redirect internal requests via gallery configurations, exposing sensitive metadata.
CWE-918
Everything Shell Bulletin has reported about CWE-918: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Update Crawl4AI to 0.9.4 to Block Critical SSRF Flaw Exposing Internal Networks
A CVSS 9.2 server-side request forgery in Crawl4AI versions before 0.9.4 allows API users to access private cloud metadata and internal network resources.