Affected by GO-2025-3548 and 8 other vulnerabilities

GO-2025-3548: Ollama Vulnerable to Denial of Service (DoS) via Crafted GZIP in github.com/ollama/ollama

GO-2025-3557: Ollama Allocation of Resources Without Limits or Throttling vulnerability in github.com/ollama/ollama

GO-2025-3558: Ollama Allows Out-of-Bounds Read in github.com/ollama/ollama

GO-2025-3559: Ollama Divide By Zero vulnerability in github.com/ollama/ollama

GO-2025-3582: Ollama Denial of Service (DoS) via Null Pointer Dereference in github.com/ollama/ollama

GO-2025-3689: Ollama Divide by Zero Vulnerability in github.com/ollama/ollama

GO-2025-3695: Ollama Server Vulnerable to Denial of Service (DoS) Attack in github.com/ollama/ollama

GO-2025-3824: Ollama vulnerable to Cross-Domain Token Exposure in github.com/ollama/ollama

GO-2025-4251: Ollama has missing authentication enabling attackers to perform model management operations in github.com/ollama/ollama

internal/

Details

Path	Synopsis
cache
blob Package blob implements a content-addressable disk cache for blobs and manifests.	Package blob implements a content-addressable disk cache for blobs and manifests.
client
ollama Package ollama provides a client for interacting with an Ollama registry which pushes and pulls model manifests and layers as defined by the ollama.com/manifest.	Package ollama provides a client for interacting with an Ollama registry which pushes and pulls model manifests and layers as defined by the ollama.com/manifest.
internal
backoff
names
stringsx Package stringsx provides additional string manipulation functions that aren't in the standard library's strings package or go4.org/mem.	Package stringsx provides additional string manipulation functions that aren't in the standard library's strings package or go4.org/mem.
syncs Package syncs provides synchronization primitives.	Package syncs provides synchronization primitives.
manifest Package manifest provides documentation for the Ollama manifest format.	Package manifest provides documentation for the Ollama manifest format.
registry Package registry implements an http.Handler for handling local Ollama API model management requests.	Package registry implements an http.Handler for handling local Ollama API model management requests.
testutil