| id: GO-2024-2699 |
| modules: |
| - module: github.com/jmorganca/ollama |
| versions: |
| - fixed: 0.1.29 |
| vulnerable_at: 0.1.28 |
| summary: Ollama DNS rebinding vulnerability in github.com/jmorganca/ollama |
| cves: |
| - CVE-2024-28224 |
| ghsas: |
| - GHSA-5jx5-hqx5-2vrj |
| references: |
| - advisory: https://github.com/advisories/GHSA-5jx5-hqx5-2vrj |
| - advisory: https://nvd.nist.gov/vuln/detail/CVE-2024-28224 |
| - web: https://github.com/ollama/ollama/releases |
| - web: https://research.nccgroup.com/2024/04/08/technical-advisory-ollama-dns-rebinding-attack-cve-2024-28224 |
| source: |
| id: GHSA-5jx5-hqx5-2vrj |
| created: 2024-06-06T16:17:36.326182-04:00 |
| review_status: UNREVIEWED |
