npm/code-ollama: high 7.8

code-ollama: `grep_search` Command Injection via Unescaped `$()` Shell Substitution (CWE-78)

Action: Upgrade code-ollama to 0.36.1 or later.

npm i code-ollama@0.36.1

Affected

Fixed versions

Sources

• osv: GHSA-456v-xq2p-r4cj
• https://github.com/ai-action/code-ollama/security/advisories/GHSA-456v-xq2p-r4cj
• https://github.com/ai-action/code-ollama

published 2026-09-28T13:59:43Z · modified 2026-09-28T14:15:04.449616255Z · JSON