VDB

GO-2024-3104

GO-2024-3104 PUBLISHED

Ollama can extract members of a ZIP archive outside of the parent directory in github.com/ollama/ollama

Affected Products

VendorProductVersions
github.comollama/ollama0, 0

Timeline

  • Aug 30, 2024 CVE Published
  • Dec 12, 2024 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›