Ollama
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 42 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 8, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Ollama Pull API name.go IsValid server-side request forgery
Path Traversal leading to Remote Code Execution in Ollama
Ollama 0.14.0 before 0.31.2 Experimental Agent Bash Approval Bypass via Prefix-Based Authorization
Ollama GGUF Decoder gguf.go readGGUFV1String integer overflow
Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect
Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser
(0Day) Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability
ZDI-26-403: (0Day) Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability
(0Day) Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability
There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine
Monitor Ollama in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.