GO-2024-2901: Ollama does not validate the format of the digest (sha256 with 64 hex digits) in github.com/ollama/ollama
GO-2024-3104: Ollama can extract members of a ZIP archive outside of the parent directory in github.com/ollama/ollama
GO-2024-3245: Ollama Out-of-bounds Read in github.com/ollama/ollama
GO-2025-3548: Ollama Vulnerable to Denial of Service (DoS) via Crafted GZIP in github.com/ollama/ollama
GO-2025-3557: Ollama Allocation of Resources Without Limits or Throttling vulnerability in github.com/ollama/ollama
GO-2025-3558: Ollama Allows Out-of-Bounds Read in github.com/ollama/ollama
GO-2025-3559: Ollama Divide By Zero vulnerability in github.com/ollama/ollama
GO-2025-3582: Ollama Denial of Service (DoS) via Null Pointer Dereference in github.com/ollama/ollama
GO-2025-3689: Ollama Divide by Zero Vulnerability in github.com/ollama/ollama
GO-2025-3695: Ollama Server Vulnerable to Denial of Service (DoS) Attack in github.com/ollama/ollama
GO-2025-3824: Ollama vulnerable to Cross-Domain Token Exposure in github.com/ollama/ollama
GO-2025-3851: Ollama allows deletion of arbitrary files in github.com/ollama/ollama
GO-2025-4251: Ollama has missing authentication enabling attackers to perform model management operations in github.com/ollama/ollama
GO-2026-5748: Ollama contains a heap out-of-bounds read vulnerability in the GGUF model loader in github.com/ollama/ollama
GO-2026-5750: Ollama is Vulnerable to Path Traversal in github.com/ollama/ollama