Skip to content
OpenAdvisories

Package · npm

code-ollama

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    GHSA-456v-xq2p-r4cj

    code-ollama: `grep_search` Command Injection via Unescaped `$()` Shell Substitution (CWE-78)

    ## `grep_search` Command Injection via Unescaped `$()` Shell Substitution (CWE-78) ### Summary The `grep_search` tool in `code-ollama` constructs a shell command string by interpolating attacker-controlled `pattern` and `path` arguments, then executes it via …

    code-ollama npm