Skip to content
OpenAdvisories

Package · Go

github.com/ollama/ollama

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2024-12886 Public exploit

    Out-Of-Memory (OOM) Vulnerability in ollama/ollama

    An Out-Of-Memory (OOM) vulnerability exists in the `ollama` server version 0.3.14. This vulnerability can be triggered when a malicious API server responds with a gzip bomb HTTP response, leading to the `ollama` server crashing. The vulnerability is present i…

    Ollama ollama/ollama github.com/ollama/ollama Go
  • High 8.8
    CVE-2024-37032 Public exploit Scanner template EPSS 90%

    Ollama does not validate the format of the digest (sha256 with 64 hex digits)

    Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path, and thus mishandles the TestGetBlobsPath test cases such as fewer than 64 hex digits, more than 64 hex digits, or an initial ../ substring.

    ollama github.com/ollama/ollama ollama-cpu Wolfi Go