Ollama Allocation of Resources Without Limits or Throttling vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-0315 · ADVISORY
• ollama/ollama · PACKAGE
• huntr.com/bounties/da414d29-b55a-496f-b135-17e0fcec67bc · WEB
• GitHub Advisory GHSA-fccc-8m69-8r78 · ADVISORY

github.com/ollama/ollama のその他の脆弱性

• CVE-2026-7482緊急 9.1Ollama before 0.17.1 contains a heap out-of-bounds read vulnerability in the GGUF model loader. The /api/create endpoint accepts an attacker…
• CVE-2026-7020低 3.7A security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath of the file x/imagegen/transfer/transfer.…
• CVE-2025-63389緊急 9.8A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The pla…
• CVE-2025-44779中 6.6An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/pull.
• CVE-2025-51471中 6.9Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and …