CVE-2024-45436
Fixed in a distro release EPSS 3%CVSS 9.1
extractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the parent directory.
Products: ollama
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/ollama/ollama | 0.1.47 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| openSUSE Tumbleweed | govulncheck-vulndb | 0.0.20241213T205935-1.1 |