https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:14:42.469013+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-239821 EUVD-2026-239821 2026-10-03T09:14:42.560528+00:00 EUVD-2026-239821 https://cve.radiocsirt.org/vuln/fkie_cve-2025-1975 fkie_cve-2025-1975 2026-10-03T09:14:42.560566+00:00

A vulnerability in the Ollama server version 0.5.11 allows a malicious user to cause a Denial of Service (DoS) attack by customizing the manifest content and spoofing a service. This is due to improper validation of array index access when downloading a model via the /api/pull endpoint, which can lead to a server crash.

 https://cve.radiocsirt.org/vuln/ghsa-wrh5-cmwx-q2qr GHSA-wrh5-cmwx-q2qr — Ollama Server Vulnerable to Denial of Service (DoS) Attack 2026-10-03T09:14:42.560601+00:00

Affected: Go: github.com/ollama/ollama

A vulnerability in the Ollama server version 0.5.11 allows a malicious user to cause a Denial of Service (DoS) attack by customizing the manifest content and spoofing a service. This is due to improper validation of array index access when downloading a model via the /api/pull endpoint, which can lead to a server crash.

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15159-1 openSUSE-SU-2025:15159-1 — govulncheck-vulndb-0.0.20250523T151856-1.1 on GA media 2026-10-03T09:14:42.560628+00:00

govulncheck-vulndb-0.0.20250523T151856-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2025-145 Withdrawn: PYSEC-2025-145 2026-10-03T09:14:42.560656+00:00

Withdrawn by the publisher.

Affected: PyPI: ollama

A vulnerability in the Ollama server version 0.5.11 allows a malicious user to cause a Denial of Service (DoS) attack by customizing the manifest content and spoofing a service. This is due to improper validation of array index access when downloading a model via the /api/pull endpoint, which can lead to a server crash.