Ollama
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 37 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 8, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser
(0Day) Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability
ZDI-26-403: (0Day) Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability
(0Day) Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability
There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine
Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers
Remote Code Execution in Ollama via Update Mechanism
Missing Signature Verification for Updates in Ollama
Ollama Tensor Model Transfer transfer.go digestToPath path traversal
Ollama Model Pull API download.go server-side request forgery
Monitor Ollama in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.