AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Companies

Ollama security advisories

16 advisories across Ollama

Company profile
High 9.1May 4Ollama contains a heap out-of-bounds read vulnerability in the GGUF model loaderCVE-2026-7482fixed in 0.17.1Low 5.6Apr 26Ollama is Vulnerable to Path TraversalCVE-2026-7020no fix yetCriticalDec 18, 2025Ollama Platform has missing authentication enabling attackers to perform model management operationsCVE-2025-63389no fix yetMedium 6.6Aug 7, 2025Ollama allows deletion of arbitrary filesCVE-2025-44779fixed in 0.1.34Medium 6.9Jul 22, 2025Ollama vulnerable to Cross-Domain Token ExposureCVE-2025-51471no fix yetHigh 7.5May 16, 2025Ollama Server Vulnerable to Denial of Service (DoS) AttackCVE-2025-1975no fix yetHigh 7.5Mar 20, 2025Ollama Divide By Zero vulnerabilityCVE-2025-0317no fix yetHigh 7.5Mar 20, 2025Ollama Allocation of Resources Without Limits or Throttling vulnerabilityCVE-2025-0315no fix yetHigh 7.5Mar 20, 2025Ollama Denial of Service (DoS) via Null Pointer DereferenceCVE-2025-0312no fix yetHigh 7.5Mar 20, 2025Ollama Divide by Zero VulnerabilityCVE-2024-8063no fix yetHigh 7.5Mar 20, 2025Ollama Vulnerable to Denial of Service (DoS) via Crafted GZIPCVE-2024-12886no fix yetHigh 7.5Mar 20, 2025Ollama Allows Out-of-Bounds ReadCVE-2024-12055no fix yetHigh 8.2Oct 31, 2024Ollama Out-of-bounds ReadCVE-2024-39720fixed in 0.1.46High 7.5Aug 29, 2024Ollama can extract members of a ZIP archive outside of the parent directoryCVE-2024-45436fixed in 0.1.47MediumMay 31, 2024Ollama does not validate the format of the digest (sha256 with 64 hex digits)CVE-2024-37032fixed in 0.1.34High 8.8Apr 8, 2024Ollama DNS rebinding vulnerabilityCVE-2024-28224fixed in 0.1.29
About Ollama

Open-source tool for running open-weight AI models locally, plus a paid cloud service.

Elsewhere on Ibis: Funding · Paydays · Releases · Repos