GHSA-93jv-pvg8-hf3v
Ollama allows deletion of arbitrary files
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/ollama/ollama | < 0.1.34 | 0.1.34 |
Details
As written in the advisory (Markdown source, shown as plain text).
An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/pull.
References
External links from the advisory. They lead to third-party sites.