Ollama
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 40 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 8, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Ollama 0.14.0 before 0.31.2 Experimental Agent Bash Approval Bypass via Prefix-Based Authorization
Ollama GGUF Decoder gguf.go readGGUFV1String integer overflow
Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect
Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser
(0Day) Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability
ZDI-26-403: (0Day) Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability
(0Day) Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability
There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine
Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers
Remote Code Execution in Ollama via Update Mechanism
Monitor Ollama in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.