s1ko/ollama-imagegen-blobpath-lfi
ollama: unvalidated registry manifest digest in the tensor-model pull path (BlobPath, Download early-exit) resolves outside the blob dir. Fixed in v0.34.2/v0.35.0.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.