Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47358
HistoryJun 05, 2024 - 6:07 a.m.

Improper Input Validation

2024-06-0506:07:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
improper input validation
github
vulnerable
sha256
test cases
mishandling

6.4 Medium

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

github.com/ollama/ollama is vulnerable to Improper Input Validation. The vulnerability is due to improper validation of the digest format sha256 with 64 hex digits) when getting the model path, which results in the mishandling of the TestGetBlobsPath test cases with fewer than 64 hex digits, more than 64 hex digits, or an initial …/ substring.

6.4 Medium

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%