Advisories · Technology
Ollama.
Every CVE that names Ollama among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
Ollama Pull API name.go IsValid server-side request forgery
- Ollama
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
Path Traversal leading to Remote Code Execution in Ollama
- Ollama
- Path traversal
- CWE-913
- CVSS 8.5 High
Ollama 0.14.0 before 0.31.2 Experimental Agent Bash Approval Bypass via Prefix-Based Authorization
- ollama
- Broken access control
- CVSS 5.3 Medium
Ollama GGUF Decoder gguf.go readGGUFV1String integer overflow
- Ollama
- Memory corruption
- CWE-189
- CVSS 8.7 High
Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect
- ollama
- Server-side request forgery (SSRF)
- CVSS 8.7 High
Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser
- Ollama
- Denial of service
- CVSS 7.5 High
There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine
- Ollama
- CVSS 7.7 High
Remote Code Execution in Ollama via Update Mechanism
- Ollama
- Path traversal
- CWE-494
- CVSS 7.7 High
Missing Signature Verification for Updates in Ollama
- Ollama
- CWE-494
- CVSS 5.3 Medium
Ollama Model Pull API download.go server-side request forgery
- Ollama
- Server-side request forgery (SSRF)
- CVSS 8.7 High
Ollama Multi-Modal Model Image Processing NULL Pointer Dereference
- Ollama
- CWE-395