Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path, and thus mishandles the TestGetBlobsPath test cases such…

An issue was discovered in Ollama before 0.1.46

Ollama 0.14.0 before 0.31.2 Experimental Agent Bash Approval Bypass via Prefix-Based Authorization

Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect

Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser

Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability

There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine

An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs/ggml/gguf.go, function readGGUFV1String reads a string length from untrusted GGUF…

An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the GGUF decoder

Ollama Multi-Modal Model Image Processing NULL Pointer Dereference

Improper Validation of Array Index in ollama/ollama

Divide by Zero in ollama/ollama

NULL Pointer Dereference in ollama/ollama

Divide By Zero in ollama/ollama

Allocation of Resources Without Limits or Throttling in ollama/ollama

DoS using malicious gguf model file in ollama/ollama

An issue was discovered in Ollama through 0.3.14

An issue was discovered in Ollama before 0.1.46

An issue was discovered in Ollama before 0.1.34

extractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the parent directory

Ollama Pull API name.go IsValid server-side request forgery