LocalAI MCP Server
by mudlerLocalAI is the open-source AI engine. Run any model - LLMs, vision, voice, image, video - on any hardware. No GPU required.
LocalAI is an open-source mcp server by mudler, written mainly in Go, with 50,108 GitHub stars and the MIT license. Its code was last updated Nov 1, 2026.
Scan summary: scanned Nov 5, 2026 at commit b740549. Seen able to run dynamic code. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
b740549 · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.Secrets scanfailFlagged. This check found an issue. See the findings below.
Flagged. This check found an issue. See the findings below.Dependency audit3428 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Buildn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Network egressn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (172)
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dropper issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
backend/python/qwen-tts/backend.py:568 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.httpcore2@2.9.1: 8 known vulnerabilitiesPYSEC-2026-3844, PYSEC-2026-3844, PYSEC-2026-3844, PYSEC-2026-3844, PYSEC-2026-3844 +3 more
backend/python/ace-step/requirements-cpu.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.httpx2@2.9.1: 40 known vulnerabilitiesPYSEC-2026-3845, PYSEC-2026-3846, PYSEC-2026-3847, PYSEC-2026-3848, PYSEC-2026-3849 +35 more
backend/python/ace-step/requirements-cpu.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.torch@2.9.1: 60 known vulnerabilitiesPYSEC-2026-139, PYSEC-2026-2286, GHSA-qfhq-4f3w-5fph, GHSA-rrmf-rvhw-rf47, PYSEC-2026-139 +55 more
backend/python/ace-step/requirements-cpu.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.gradio@6.9.0: 12 known vulnerabilitiesPYSEC-2026-211, PYSEC-2026-2178, PYSEC-2026-2179, PYSEC-2026-211, PYSEC-2026-2178 +7 more
backend/python/ace-step/requirements-cublas12.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.orjson@3.9.9: 14 known vulnerabilitiesPYSEC-2024-40, PYSEC-2026-107, PYSEC-2024-40, PYSEC-2026-107, PYSEC-2024-40 +9 more
backend/python/ace-step/requirements-cublas12.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.52.1: 20 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248, PYSEC-2026-249 +15 more
backend/python/ace-step/requirements-cublas12.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.accelerate@1.12.0: 1 known vulnerabilityPYSEC-2026-3804
backend/python/ace-step/requirements-hipblas.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.gradio@6.5.1: 7 known vulnerabilitiesPYSEC-2026-211, PYSEC-2026-2178, PYSEC-2026-2179, PYSEC-2026-63, PYSEC-2026-64 +2 more
backend/python/ace-step/requirements-hipblas.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.transformers@5.9.0: 10 known vulnerabilitiesPYSEC-2026-3929, PYSEC-2026-3929, PYSEC-2026-3929, PYSEC-2026-3929, PYSEC-2026-3929 +5 more
backend/python/ace-step/requirements-intel.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.torch@2.6.0+cu124: 19 known vulnerabilitiesPYSEC-2025-191, PYSEC-2025-198, PYSEC-2025-199, PYSEC-2025-200, PYSEC-2025-201 +14 more
backend/python/chatterbox/requirements-cublas12.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.requests@2.9.2: 55 known vulnerabilitiesPYSEC-2018-28, PYSEC-2023-74, PYSEC-2026-1872, PYSEC-2026-1873, PYSEC-2026-2275 +50 more
backend/python/coqui/requirements-cpu.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.setuptools@9.1.0: 44 known vulnerabilitiesPYSEC-2022-43012, PYSEC-2025-49, PYSEC-2026-1918, PYSEC-2026-3447, PYSEC-2022-43012 +39 more
backend/python/coqui/requirements-cpu.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.torch@2.8.0+xpu: 8 known vulnerabilitiesPYSEC-2025-203, PYSEC-2025-204, PYSEC-2025-206, PYSEC-2026-139, PYSEC-2026-2286 +3 more
backend/python/coqui/requirements-intel.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.torch@2.7.1: 198 known vulnerabilitiesPYSEC-2025-203, PYSEC-2025-204, PYSEC-2025-206, PYSEC-2026-139, PYSEC-2026-1970 +193 more
backend/python/coqui/requirements-mps.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.torch@2.9.1+cu130: 8 known vulnerabilitiesPYSEC-2026-139, PYSEC-2026-2286, GHSA-qfhq-4f3w-5fph, GHSA-rrmf-rvhw-rf47, PYSEC-2026-139 +3 more
backend/python/fish-speech/requirements-cublas13.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.torch@2.10.0: 10 known vulnerabilitiesPYSEC-2026-139, GHSA-rrmf-rvhw-rf47, PYSEC-2026-139, GHSA-rrmf-rvhw-rf47, PYSEC-2026-139 +5 more
backend/python/llama-cpp-quantization/requirements-mps.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.diffusers@0.35.1: 3 known vulnerabilitiesPYSEC-2026-2446, PYSEC-2026-40, PYSEC-2026-41
backend/python/longcat-video/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pyarrow@20.0.0: 1 known vulnerabilityPYSEC-2026-113
backend/python/nemo/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fsspec@2025.9.0: 1 known vulnerabilityPYSEC-2026-4217
backend/python/neutts/requirements-after.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pycryptodomex@3.9.9: 7 known vulnerabilitiesPYSEC-2024-3, PYSEC-2024-3, PYSEC-2024-3, PYSEC-2024-3, PYSEC-2024-3 +2 more
backend/python/neutts/requirements-after.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.torch@2.8.0: 24 known vulnerabilitiesPYSEC-2025-203, PYSEC-2025-204, PYSEC-2025-206, PYSEC-2026-139, PYSEC-2026-2286 +19 more
backend/python/neutts/requirements-cpu.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.torch@2.9.0: 10 known vulnerabilitiesPYSEC-2026-139, PYSEC-2026-2286, GHSA-qfhq-4f3w-5fph, GHSA-rrmf-rvhw-rf47, GHSA-vgrw-7cvw-pwgx +5 more
backend/python/outetts/requirements-cublas13.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-multipart@0.0.9: 24 known vulnerabilitiesPYSEC-2026-1851, PYSEC-2026-1852, PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038 +19 more
backend/python/sglang/requirements-cublas12-after.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.accelerate@1.9.0: 4 known vulnerabilitiesPYSEC-2026-3804, PYSEC-2026-3804, PYSEC-2026-3804, PYSEC-2026-3804
backend/python/trl/requirements-cpu.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.torch@2.7.0: 14 known vulnerabilitiesPYSEC-2025-203, PYSEC-2025-204, PYSEC-2025-205, PYSEC-2025-206, PYSEC-2025-207 +9 more
backend/python/vllm-omni/requirements-cublas12.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.torch@2.9.1+cpu: 4 known vulnerabilitiesPYSEC-2026-139, PYSEC-2026-2286, GHSA-qfhq-4f3w-5fph, GHSA-rrmf-rvhw-rf47
backend/python/vllm/requirements-cpu.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vllm@0.29.0: 32 known vulnerabilitiesPYSEC-2026-3996, PYSEC-2026-3999, PYSEC-2026-4000, PYSEC-2026-4004, PYSEC-2026-4005 +27 more
backend/python/vllm/requirements-l4t13-after.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fsspec@2025.3.0: 1 known vulnerabilityPYSEC-2026-4217
backend/python/voxcpm/requirements-cpu.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@modelcontextprotocol/sdk@1.30.0: 12 known vulnerabilitiesGHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +7 more
core/http/react-ui/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@2.2.2: 2 known vulnerabilitiesGHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
core/http/react-ui/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.12: 7 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
core/http/react-ui/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.1.0: 6 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
core/http/react-ui/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@5.0.6: 6 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
core/http/react-ui/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.28.1: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
core/http/react-ui/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.1.0: 12 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
core/http/react-ui/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.flatted@3.3.4: 2 known vulnerabilitiesGHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
core/http/react-ui/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@3.14.2: 4 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
core/http/react-ui/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.1.1: 4 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
core/http/react-ui/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.12: 2 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8
core/http/react-ui/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.15: 2 known vulnerabilitiesGHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849
core/http/react-ui/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 2 known vulnerabilitiesGHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q
core/http/react-ui/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@7.25.0: 29 known vulnerabilitiesGHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-35p6-xmwp-9g52, GHSA-3xpg-4rpp-hhhm +24 more
core/http/react-ui/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@8.3.2: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
core/http/react-ui/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@8.0.14: 7 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff, GHSA-r825-w8mm-5pxw +2 more
core/http/react-ui/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.3.6: 2 known vulnerabilitiesGHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5
core/http/react-ui/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@2.3.0: 1 known vulnerabilityGHSA-27r3-jxmh-p828
core/http/react-ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.18: 3 known vulnerabilitiesGHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7
core/http/react-ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.1.4: 3 known vulnerabilitiesGHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7
core/http/react-ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@5.0.9: 3 known vulnerabilitiesGHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7
core/http/react-ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.16: 1 known vulnerabilityGHSA-2v37-7h3g-55p8
core/http/react-ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pdfjs-dist@5.6.205: 1 known vulnerabilityGHSA-hq66-cqwq-w95j
core/http/react-ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@7.29.0: 18 known vulnerabilitiesGHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-3wwx-pv8p-q78v, GHSA-3xpg-4rpp-hhhm +13 more
core/http/react-ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@8.0.16: 5 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22
core/http/react-ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.github.com/docker/docker@28.5.2+incompatible: 5 known vulnerabilitiesGO-2026-4883, GO-2026-4887, GO-2026-5617, GO-2026-5668, GO-2026-5746
go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.github.com/go-git/go-git/v5@5.19.0: 5 known vulnerabilitiesGO-2026-5336, GO-2026-5496, GO-2026-5693, GO-2026-6213, GO-2026-6214
go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.github.com/go-jose/go-jose/v4@4.1.4: 3 known vulnerabilitiesGHSA-4w3g-jfj2-cw2q, GHSA-mgcc-cww5-fp2q, GHSA-vvm8-gf78-28g4
go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.github.com/klauspost/compress@1.18.6: 1 known vulnerabilityGO-2026-5841
go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.github.com/mholt/archiver/v3@3.5.1: 2 known vulnerabilitiesGO-2024-2698, GO-2025-3605
go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.github.com/moby/go-archive@0.2.0: 1 known vulnerabilityGO-2026-6253
go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.github.com/sigstore/rekor@1.4.3: 3 known vulnerabilitiesGO-2026-4354, GO-2026-4355, GO-2026-5778
go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.google.golang.org/grpc@1.80.0: 4 known vulnerabilitiesGO-2026-6061, GO-2026-6348, GO-2026-6441, GO-2026-6443
go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.oras.land/oras-go/v2@2.6.0: 7 known vulnerabilitiesGO-2026-5879, GO-2026-5880, GO-2026-5882, GO-2026-5884, GO-2026-5885 +2 more
go.mod - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key2 matches in this file
.github/ci/variantproposals/quant_test.go:58 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
addons/jellyfin/internal/tools/helpers_test.go:16 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: aws-access-token
addons/pikvm/internal/tools/write_test.go:273 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
addons/web/internal/tools/tools_test.go:34 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
addons/web/internal/providers/providers_test.go:29 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
addons/web/internal/settings/settings_test.go:22 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
core/application/readiness_test.go:39 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
core/application/model_artifact_materializer_test.go:25 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
core/backend/model_artifact_options_test.go:18 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key2 matches in this file
core/config/model_artifact_binding_test.go:34 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key3 matches in this file
core/config/model_config_loader_test.go:58 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
core/gallery/inference_defaults_direct_install_test.go:49 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
core/gallery/inference_defaults_install_test.go:170 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key4 matches in this file
core/gallery/model_artifacts_test.go:44 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
core/gallery/queued_import_install_test.go:34 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key2 matches in this file
core/config/model_config_test.go:123 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
core/http/react-ui/e2e/access-fixtures.js:139 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key2 matches in this file
core/http/react-ui/e2e/tools-fixtures.js:151 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
core/http/react-ui/tests/unit/addons.test.mjs:85 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
core/services/galleryop/model_artifact_materializer_test.go:25 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
core/services/modeladmin/remote_sync_test.go:282 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: aws-access-token
core/services/studio/changemode_internal_test.go:39 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
core/services/studio/connectors_reasons_test.go:24 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
core/services/studio/knowledge_test.go:301 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
docs/content/advanced/model-configuration.md:127 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
examples/distributed/garage.toml:12 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
docs/content/getting-started/troubleshooting.md:308 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key2 matches in this file
pkg/modelartifacts/types_test.go:65 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
pkg/modelartifacts/partial_test.go:24 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
tests/e2e/studio_agents_journeys_test.go:553 - lowLow. Minor, or common in normal tools. Shown for information.idna@3.9.0: 13 known vulnerabilitiesPYSEC-2026-215, PYSEC-2026-215, PYSEC-2026-215, PYSEC-2026-215, PYSEC-2026-215 +8 more
backend/python/ace-step/requirements-cublas12.txt - lowLow. Minor, or common in normal tools. Shown for information.torch@2.10.0+rocm7.0: 16 known vulnerabilitiesGHSA-rrmf-rvhw-rf47, GHSA-rrmf-rvhw-rf47, GHSA-rrmf-rvhw-rf47, GHSA-rrmf-rvhw-rf47, GHSA-rrmf-rvhw-rf47 +11 more
backend/python/ace-step/requirements-hipblas.txt - lowLow. Minor, or common in normal tools. Shown for information.torch@2.11.0+xpu: 1 known vulnerabilityGHSA-rrmf-rvhw-rf47
backend/python/kokoro/requirements-intel.txt - lowLow. Minor, or common in normal tools. Shown for information.torch@2.12.1: 6 known vulnerabilitiesGHSA-rrmf-rvhw-rf47, GHSA-rrmf-rvhw-rf47, GHSA-rrmf-rvhw-rf47, GHSA-rrmf-rvhw-rf47, GHSA-rrmf-rvhw-rf47 +1 more
backend/python/llama-cpp-quantization/requirements-cpu.txt - lowLow. Minor, or common in normal tools. Shown for information.datasets@4.1.1: 1 known vulnerabilityPYSEC-2026-3716
backend/python/neutts/requirements-after.txt - lowLow. Minor, or common in normal tools. Shown for information.diskcache@5.6.3: 3 known vulnerabilitiesPYSEC-2026-2447, PYSEC-2026-2447, PYSEC-2026-2447
backend/python/sglang/requirements-cublas12-after.txt - lowLow. Minor, or common in normal tools. Shown for information.scipy@1.6.1: 6 known vulnerabilitiesPYSEC-2023-102, PYSEC-2023-114, PYSEC-2023-102, PYSEC-2023-114, PYSEC-2023-102 +1 more
backend/python/sglang/requirements-cublas12-after.txt - lowLow. Minor, or common in normal tools. Shown for information.datasets@3.6.0: 1 known vulnerabilityPYSEC-2026-3716
backend/python/voxcpm/requirements-cpu.txt - lowLow. Minor, or common in normal tools. Shown for information.anyhow@1.0.102: 1 known vulnerabilityRUSTSEC-2026-0190
backend/rust/kokoros/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.audiopus_sys@0.2.2: 1 known vulnerabilityRUSTSEC-2026-0150
backend/rust/kokoros/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.h2@0.4.13: 1 known vulnerabilityRUSTSEC-2026-0258
backend/rust/kokoros/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.number_prefix@0.4.0: 1 known vulnerabilityRUSTSEC-2025-0119
backend/rust/kokoros/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rustls@0.23.45: 4 known vulnerabilitiesRUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, RUSTSEC-2026-0349
backend/rust/kokoros/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rustls-webpki@0.103.15: 1 known vulnerabilityRUSTSEC-2026-0382
backend/rust/kokoros/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.tokio@1.51.0: 1 known vulnerabilityRUSTSEC-2026-0386
backend/rust/kokoros/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.webpki-root-certs@1.0.6: 1 known vulnerabilityRUSTSEC-2026-0383
backend/rust/kokoros/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.29.0: 1 known vulnerabilityGHSA-4x5r-pxfx-6jf8
core/http/react-ui/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.@hono/node-server@1.19.11: 3 known vulnerabilitiesGHSA-92pp-h63x-v22m, GHSA-frvp-7c67-39w9, GHSA-rmxm-3fg6-px4f
core/http/react-ui/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.@humanfs/node@0.16.7: 1 known vulnerabilityGHSA-p498-v437-472g
core/http/react-ui/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.baseline-browser-mapping@2.10.0: 1 known vulnerabilityGHSA-w5vr-8v7q-w6rv
core/http/react-ui/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.glob@10.5.0: 2 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-3g3m-2fjr-6pw4
core/http/react-ui/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.glob@13.0.6: 2 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-3g3m-2fjr-6pw4
core/http/react-ui/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.hono@4.12.34: 5 known vulnerabilitiesGHSA-5r4p-p66f-jhc7, GHSA-crvj-82cr-hjcx, GHSA-g6gw-c38x-mqfc, GHSA-gqvv-2mrq-wpjv, GHSA-hxh3-vqpv-xpqv
core/http/react-ui/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.i18next-http-backend@3.0.6: 6 known vulnerabilitiesGHSA-3cmx-xjww-583x, GHSA-9jhj-wvmw-cfx5, GHSA-xvq9-wjp8-hwqf, GHSA-3cmx-xjww-583x, GHSA-9jhj-wvmw-cfx5 +1 more
core/http/react-ui/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.ip-address@10.3.1: 10 known vulnerabilitiesGHSA-2vr4-cq9g-pvrc, GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +5 more
core/http/react-ui/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.minimatch@10.2.5: 2 known vulnerabilitiesGHSA-g3hv-75wg-m249, GHSA-g3hv-75wg-m249
core/http/react-ui/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.minimatch@9.0.9: 2 known vulnerabilitiesGHSA-g3hv-75wg-m249, GHSA-g3hv-75wg-m249
core/http/react-ui/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.qs@6.15.0: 4 known vulnerabilitiesGHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-q8mj-m7cp-5q26, GHSA-x5fp-wj9c-mxmx
core/http/react-ui/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.@hono/node-server@2.1.0: 1 known vulnerabilityGHSA-rmxm-3fg6-px4f
core/http/react-ui/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.fast-uri@3.1.7: 5 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-hrr3-gc8f-f4qj, GHSA-w74x-v6f9-j3xg, GHSA-wjr9-j795-jxcr, GHSA-xhq7-xmqj-769h
core/http/react-ui/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.hono@4.13.5: 2 known vulnerabilitiesGHSA-5r4p-p66f-jhc7, GHSA-hxh3-vqpv-xpqv
core/http/react-ui/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.qs@6.16.0: 1 known vulnerabilityGHSA-6pq8-jhm2-2vcw
core/http/react-ui/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.filippo.io/edwards25519@1.1.0: 1 known vulnerabilityGO-2026-4503
go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/containerd/containerd@1.7.33: 7 known vulnerabilitiesGO-2026-5064, GO-2026-5338, GO-2026-5622, GO-2026-6444, GO-2026-6597 +2 more
go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/in-toto/in-toto-golang@0.9.0: 1 known vulnerabilityGO-2026-5547
go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/libp2p/go-libp2p-kad-dht@0.40.0: 1 known vulnerabilityGO-2024-3218
go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/moby/sys/user@0.4.0: 1 known vulnerabilityGO-2026-6686
go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/nwaples/rardecode@1.1.0: 1 known vulnerabilityGO-2025-4020
go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/ollama/ollama@0.20.4: 9 known vulnerabilitiesGO-2025-3557, GO-2025-3558, GO-2025-3559, GO-2025-3582, GO-2025-3689 +4 more
go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/pion/dtls/v3@3.1.2: 1 known vulnerabilityGO-2026-6165
go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/pion/stun/v3@3.1.1: 1 known vulnerabilityGO-2026-6163
go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/quic-go/quic-go@0.59.0: 1 known vulnerabilityGO-2026-5676
go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/quic-go/webtransport-go@0.10.0: 1 known vulnerabilityGO-2026-6099
go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/sigstore/sigstore@1.10.0: 1 known vulnerabilityGO-2026-4358
go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/sigstore/sigstore-go@1.1.4: 2 known vulnerabilitiesGO-2026-5952, GO-2026-6162
go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/sigstore/timestamp-authority/v2@2.0.3: 2 known vulnerabilitiesGO-2026-5763, GO-2026-5851
go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/theupdateframework/go-tuf/v2@2.3.0: 3 known vulnerabilitiesGO-2026-4348, GO-2026-4349, GO-2026-4377
go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/ulikunitz/xz@0.5.14: 1 known vulnerabilityGO-2025-3922
go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/yuin/goldmark@1.7.13: 1 known vulnerabilityGO-2026-5320
go.mod - lowLow. Minor, or common in normal tools. Shown for information.go.mongodb.org/mongo-driver@1.17.6: 1 known vulnerabilityGO-2026-5327
go.mod - lowLow. Minor, or common in normal tools. Shown for information.go.opentelemetry.io/otel/sdk@1.44.0: 1 known vulnerabilityGO-2026-6505
go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/crypto@0.54.0: 4 known vulnerabilitiesGO-2026-5932, GO-2026-6303, GO-2026-6354, GO-2026-6355
go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/image@0.44.0: 1 known vulnerabilityGO-2026-6222
go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/mod@0.37.0: 2 known vulnerabilitiesGO-2026-6179, GO-2026-6180
go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/net@0.56.0: 7 known vulnerabilitiesGO-2026-6603, GO-2026-6610, GO-2026-6611, GO-2026-6612, GO-2026-6617 +2 more
go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/text@0.40.0: 1 known vulnerabilityGO-2026-6629
go.mod - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
LocalAI alternatives
View more →Similar mcp servers in Design & Media, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| LocalAI (this page) mudler | 50k | MIT | Nov 1, 2026 | Scanned, no flagged issues |
| Next AI Draw Io DayuanJiang | 37k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| MCP For Blender ahujasid | 33k | MIT | Oct 29, 2026 | Scanned, no flagged issues |
| Figma Context MCP GLips | 16k | MIT | Oct 27, 2026 | Scanned, no flagged issues |
| Nginx UI 0xJacky | 12k | AGPL-3.0 | Nov 1, 2026 | Scanned, no flagged issues |
| Lamda firerpa | 8.7k | MIT | Sep 27, 2026 | Scanned, no flagged issues |