https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-14T04:40:18.657177+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2024-9901 fkie_cve-2024-9901 2026-11-14T04:40:18.936563+00:00

Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-48057. Notes: All CVE users should reference CVE-2024-48057 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage.

 https://db.gcve.eu/vuln/ghsa-54hh-fh2m-4396 GHSA-54hh-fh2m-4396 2026-11-14T04:40:18.936656+00:00

LocalAI version v2.19.4 (af0545834fd565ab56af0b9348550ca9c3cb5349) contains a vulnerability where the delete model API improperly neutralizes input during web page generation, leading to a one-time storage cross-site scripting (XSS) vulnerability. This vulnerability allows an attacker to store a malicious payload that executes when a user accesses the homepage. Additionally, the presence of cross-site request forgery (CSRF) can enable automated malicious requests.