Security
فارسی
All products

github.com/ollama/ollama

Go · Package
16 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Ollama contains a heap out-of-bounds read vulnerability in the GGUF model loaderCVE-2026-7482 · GHSA-X8QC-FGGM-MPQGVersion ranges need review. github.com/ollama/ollama Go High Fix reported
Ollama Divide by Zero VulnerabilityCVE-2024-8063 · GHSA-2XF2-GJM6-G2C6Version ranges need review. github.com/ollama/ollama Go High No fix reported
Ollama is Vulnerable to Path TraversalCVE-2026-7020 · GHSA-X99G-8V8J-25J2Version ranges need review. github.com/ollama/ollamaMigration Toolkit for Applications 8/mta/mta-solution-server-rhel9 GoRed Hat Low No fix reported
Ollama Platform has missing authentication enabling attackers to perform model management operationsCVE-2025-63389 · GHSA-F6MR-38G8-39RGVersion ranges need review. github.com/ollama/ollama Go Critical No fix reported
Ollama vulnerable to Cross-Domain Token ExposureCVE-2025-51471 · GHSA-X9HG-5Q6G-Q3JRVersion ranges need review. github.com/ollama/ollama Go Medium No fix reported
Ollama Server Vulnerable to Denial of Service (DoS) AttackCVE-2025-1975 · GHSA-WRH5-CMWX-Q2QRVersion ranges need review. github.com/ollama/ollama Go High No fix reported
Ollama Allows Out-of-Bounds ReadCVE-2024-12055 · GHSA-89QX-M49C-8CRFVersion ranges need review. github.com/ollama/ollama Go High No fix reported
Ollama does not validate the format of the digest (sha256 with 64 hex digits)CVE-2024-37032 · GHSA-8HQG-WHRW-PV92Version ranges need review. github.com/ollama/ollama Go Medium Fix reported
Ollama Denial of Service (DoS) via Null Pointer DereferenceCVE-2025-0312 · GHSA-P2WH-W96X-W232Version ranges need review. github.com/ollama/ollama Go High No fix reported
Ollama Divide By Zero vulnerabilityCVE-2025-0317 · GHSA-9GCR-28RP-CC24Version ranges need review. github.com/ollama/ollama Go High No fix reported
Ollama Allocation of Resources Without Limits or Throttling vulnerabilityCVE-2025-0315 · GHSA-FCCC-8M69-8R78Version ranges need review. github.com/ollama/ollama Go High No fix reported
Ollama DNS rebinding vulnerabilityCVE-2024-28224 · GHSA-5JX5-HQX5-2VRJ github.com/jmorganca/ollamagithub.com/ollama/ollama Go High Fix reported
Ollama allows deletion of arbitrary filesCVE-2025-44779 · GHSA-93JV-PVG8-HF3VVersion ranges need review. github.com/ollama/ollama Go Medium Fix reported
Ollama Vulnerable to Denial of Service (DoS) via Crafted GZIPCVE-2024-12886 · GHSA-V464-R2R9-WWW7Version ranges need review. github.com/ollama/ollama Go High Fix reported
Ollama Out-of-bounds ReadCVE-2024-39720 · GHSA-95J2-W8X7-HM88Version ranges need review. github.com/ollama/ollama Go High Fix reported
Ollama can extract members of a ZIP archive outside of the parent directoryCVE-2024-45436 · GHSA-846M-99QV-67MGVersion ranges need review. github.com/ollama/ollama Go High Fix reported