-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/ollama/ollama | go |
Ongoing coverage of React2Shell
GoGoMiggo AIRoot Cause AnalysisThe vulnerability description explicitly names both functions as using io.ReadAll for response body handling. io.ReadAll is a well-known anti-pattern for processing untrusted HTTP responses as it reads the entire body into memory without size restrictions. When processing gzip-encoded responses (which can have extreme compression ratios), this leads to uncontrolled memory allocation. The advisory's technical details and CWE-400 classification directly align with this pattern. File paths are inferred based on Go project conventions since explicit path information wasn't provided in the advisory.