Advisoriesby Ibis
Ollama security advisories
16 advisories · 2 critical or high in 12 months · latest May 4
16 advisories
Ollama contains a heap out-of-bounds read vulnerability in the GGUF model loaderCVE-2026-7482fixed in 0.17.1Ollama is Vulnerable to Path TraversalCVE-2026-7020no fix yetOllama Platform has missing authentication enabling attackers to perform model management operationsCVE-2025-63389no fix yetOllama allows deletion of arbitrary filesCVE-2025-44779fixed in 0.1.34Ollama vulnerable to Cross-Domain Token ExposureCVE-2025-51471no fix yetOllama Server Vulnerable to Denial of Service (DoS) AttackCVE-2025-1975no fix yetOllama Divide By Zero vulnerabilityCVE-2025-0317no fix yetOllama Allocation of Resources Without Limits or Throttling vulnerabilityCVE-2025-0315no fix yetOllama Denial of Service (DoS) via Null Pointer DereferenceCVE-2025-0312no fix yetOllama Divide by Zero VulnerabilityCVE-2024-8063no fix yetOllama Vulnerable to Denial of Service (DoS) via Crafted GZIPCVE-2024-12886no fix yetOllama Allows Out-of-Bounds ReadCVE-2024-12055no fix yetOllama Out-of-bounds ReadCVE-2024-39720fixed in 0.1.46Ollama can extract members of a ZIP archive outside of the parent directoryCVE-2024-45436fixed in 0.1.47Ollama does not validate the format of the digest (sha256 with 64 hex digits)CVE-2024-37032fixed in 0.1.34Ollama DNS rebinding vulnerabilityCVE-2024-28224fixed in 0.1.29About Ollama
Run open models locally.
Packages watched: github.com/ollama/ollama (Go).
Ollama elsewhere on Ibis: Funding · Paydays · Releases · Repos