[GH-ISSUE #9331] CVE-2024-45338 #6092

Closed
opened 2026-04-12 17:25:33 -05:00 by GiteaMirror · 1 comment
Owner

Originally created by @chalecado on GitHub (Feb 25, 2025).
Original GitHub issue: https://github.com/ollama/ollama/issues/9331

Please can you bump net module

We are getting CVE alerts from trivy

Thanks

"VulnerabilityID": "CVE-2024-45338",
"PkgName": "golang.org/x/net",
"PkgIdentifier": {
"PURL": "pkg:golang/golang.org/x/net@v0.25.0",
"UID": "9cc431551314cf5d"
},
"InstalledVersion": "v0.25.0",
"FixedVersion": "0.33.0",

Originally created by @chalecado on GitHub (Feb 25, 2025). Original GitHub issue: https://github.com/ollama/ollama/issues/9331 Please can you bump net module We are getting CVE alerts from trivy Thanks "VulnerabilityID": "CVE-2024-45338", "PkgName": "golang.org/x/net", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/net@v0.25.0", "UID": "9cc431551314cf5d" }, "InstalledVersion": "v0.25.0", "FixedVersion": "0.33.0",
Author
Owner

@dhiltgen commented on GitHub (Jul 4, 2025):

We're at v0.38.0 now https://github.com/ollama/ollama/blob/main/go.mod#L75 so this should be resolved.

<!-- gh-comment-id:3037309709 --> @dhiltgen commented on GitHub (Jul 4, 2025): We're at v0.38.0 now https://github.com/ollama/ollama/blob/main/go.mod#L75 so this should be resolved.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/ollama#6092