CVE-2024-39722

Name of the Vulnerable Software and Affected Versions: Ollama versions prior to 0.1.46

Description: The issue is related to incorrect restriction of the path name to a directory with limited access. This can be exploited by a remote attacker to cause a denial of service. The vulnerability exposes which files exist on the server via path traversal in the "api/push" route.

Recommendations: For versions prior to 0.1.46, update to version 0.1.46 to resolve the issue. As a temporary workaround, consider restricting access to the "api/push" endpoint until the update is applied.