code-ollama: `grep_search` Command Injection via Unescaped `$()` Shell Substitution (CWE-78)

grepsearch Command Injection via Unescaped $ Shell Substitution CWE-78 Summary The grepsearch tool in code-ollama constructs a shell command string by interpolating attacker-controlled pattern and path arguments, then executes it via childprocess.exec. The sanitization only escapes backslashes an...

GHSA-456V-XQ2P-R4CJ code-ollama: `grep_search` Command Injection via Unescaped `$()` Shell Substitution (CWE-78)

grepsearch Command Injection via Unescaped $ Shell Substitution CWE-78 Summary The grepsearch tool in code-ollama constructs a shell command string by interpolating attacker-controlled pattern and path arguments, then executes it via childprocess.exec. The sanitization only escapes backslashes an...

NPM: code-ollama: `grep_search` Command Injection via Unescaped `$()` Shell Substitution (CWE-78)

NPM: code-ollama: grepsearch Command Injection via Unescaped $ Shell Substitution CWE-78 vulnerability discovered by ? in WordPress Npm code-ollama versions = 0.36.0...