Skip to content
OpenAdvisories

Package · Go

github.com/ollama/ollama

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-7482 Public exploit Scanner template

    Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers

    Ollama before 0.17.1 contains a heap out-of-bounds read vulnerability in the GGUF model loader. The /api/create endpoint accepts an attacker-supplied GGUF file in which the declared tensor offset and size exceed the file's actual length; during quantization i…

    Ollama Ollama k8sgpt mods Wolfi Go
  • Low 3.7
    CVE-2026-7020 Public exploit

    Ollama Tensor Model Transfer transfer.go digestToPath path traversal

    A security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath of the file x/imagegen/transfer/transfer.go of the component Tensor Model Transfer Handler. The manipulation of the argument digest results in path traversal. T…

    k8sgpt github.com/ollama/ollama Wolfi Go
  • Medium 6.9
    CVE-2025-51471 Public exploit EPSS 19%

    Ollama vulnerable to Cross-Domain Token Exposure

    Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint.

    k8sgpt mods ollama github.com/ollama/ollama Wolfi Go
  • High 7.5
    CVE-2024-12886 Public exploit

    Out-Of-Memory (OOM) Vulnerability in ollama/ollama

    An Out-Of-Memory (OOM) vulnerability exists in the `ollama` server version 0.3.14. This vulnerability can be triggered when a malicious API server responds with a gzip bomb HTTP response, leading to the `ollama` server crashing. The vulnerability is present i…

    Ollama ollama/ollama github.com/ollama/ollama Go
  • Critical 9.1
    CVE-2024-45436 Public exploit

    Ollama can extract members of a ZIP archive outside of the parent directory

    extractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the parent directory.

    github.com/ollama/ollama Go
  • High 8.8
    CVE-2024-37032 Public exploit Scanner template EPSS 90%

    Ollama does not validate the format of the digest (sha256 with 64 hex digits)

    Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path, and thus mishandles the TestGetBlobsPath test cases such as fewer than 64 hex digits, more than 64 hex digits, or an initial ../ substring.

    ollama github.com/ollama/ollama ollama-cpu Wolfi Go