Ollama 52b0a83190 Fix SQL injection in custom attribute search ...

Parameterize LIKE queries in HAVING clause to prevent SQL injection
when search_custom filter is enabled. Also sanitize search parameter
input at controller level for defense-in-depth.

Fixes vulnerability where user input was directly interpolated into
SQL queries without sanitization.

2026-03-07 19:10:42 +01:00

42 KiB

Raw Permalink Blame History

View Raw