github.com/ollama/ollama vulnerabilities
CVEs whose affected-version data names the github.com/ollama/ollama package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-7482Critical· 9.1PoCOllama contains a heap out-of-bounds read vulnerability in the GGUF model loader
Ollama contains a heap out-of-bounds read vulnerability in the GGUF model loader
▾ Abyssalollama · github.com/ollama/ollamaEPSS 2.2%via OSV
CVE-2026-7020Medium· 5.6PoCOllama is Vulnerable to Path Traversal
Ollama is Vulnerable to Path Traversal
▾ Twilightollama · github.com/ollama/ollamaEPSS 0.91%via OSV
CVE-2024-8063High· 7.5Ollama Divide by Zero Vulnerability
Ollama Divide by Zero Vulnerability
▾ Twilightollama · github.com/ollama/ollamaEPSS 0.64%via OSV
CVE-2024-28224High· 8.8Ollama DNS rebinding vulnerability
Ollama DNS rebinding vulnerability
▾ Twilightollama · github.com/ollama/ollamaEPSS 0.35%via OSV