github.com/ollama/ollama vulnerabilities
CVEs whose affected-version data names the github.com/ollama/ollama package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
CVE-2026-7482Critical· 9.1PoCOllama contains a heap out-of-bounds read vulnerability in the GGUF model loader
Ollama contains a heap out-of-bounds read vulnerability in the GGUF model loader
▾ Abyssalollama · github.com/ollama/ollamaEPSS 2.2%via OSV
CVE-2026-7020Medium· 5.6PoCOllama is Vulnerable to Path Traversal
Ollama is Vulnerable to Path Traversal
▾ Twilightollama · github.com/ollama/ollamaEPSS 0.91%via OSV
CVE-2025-63389CriticalOllama Platform has missing authentication enabling attackers to perform model management operations
Ollama Platform has missing authentication enabling attackers to perform model management operations
▾ Midnightollama · github.com/ollama/ollamaEPSS 0.71%via OSV
CVE-2024-8063High· 7.5Ollama Divide by Zero Vulnerability
Ollama Divide by Zero Vulnerability
▾ Twilightollama · github.com/ollama/ollamaEPSS 0.63%via OSV
CVE-2024-28224High· 8.8Ollama DNS rebinding vulnerability
Ollama DNS rebinding vulnerability
▾ Twilightollama · github.com/ollama/ollamaEPSS 0.33%via OSV