Lucene search
K

6 matches found

Snyk
Snyk
added 2026/04/26 7:20 a.m.2 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the digestToPath function. An attacker can access or modify files outside the intended directory by supplying crafted input to the digest parameter. Details A Directory Traversal attack also known as path travers...

6.3CVSS6.3AI score0.00077EPSS
Exploits2References2
Github Security Blog
Github Security Blog
added 2026/04/26 6:31 a.m.9 views

Ollama is Vulnerable to Path Traversal

A security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath of the file x/imagegen/transfer/transfer.go of the component Tensor Model Transfer Handler. The manipulation of the argument digest results in path traversal. The attack may be performed from remote...

6.3CVSS5.4AI score0.00077EPSS
Exploits2References5Affected Software1
OSV
OSV
added 2026/04/26 6:31 a.m.0 views

GHSA-X99G-8V8J-25J2 Ollama is Vulnerable to Path Traversal

A security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath of the file x/imagegen/transfer/transfer.go of the component Tensor Model Transfer Handler. The manipulation of the argument digest results in path traversal. The attack may be performed from remote...

6.3CVSS5.4AI score0.00077EPSS
Exploits2References5
NVD
NVD
added 2026/04/26 5:16 a.m.3 views

CVE-2026-7020

A security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath of the file x/imagegen/transfer/transfer.go of the component Tensor Model Transfer Handler. The manipulation of the argument digest results in path traversal. The attack may be performed from remote...

6.3CVSS0.00077EPSS
Exploits2References3
EUVD
EUVD
added 2026/04/26 4:45 a.m.2 views

EUVD-2026-25695

A security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath of the file x/imagegen/transfer/transfer.go of the component Tensor Model Transfer Handler. The manipulation of the argument digest results in path traversal. The attack may be performed from remote...

6.3CVSS5.2AI score0.00077EPSS
Exploits2References3
ATTACKERKB
ATTACKERKB
added 2026/04/26 4:45 a.m.4 views

CVE-2026-7020

A security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath of the file x/imagegen/transfer/transfer.go of the component Tensor Model Transfer Handler. The manipulation of the argument digest results in path traversal. The attack may be performed from remote...

6.3CVSS4.8AI score0.00077EPSS
Exploits2References4
Rows per page
Query Builder