https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:01:19 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-07910 bdu:2026-07910 https://cve.radiocsirt.org/vuln/bdu:2026-07910 https://cve.radiocsirt.org/vuln/euvd-2026-255358 EUVD-2026-255358 https://cve.radiocsirt.org/vuln/euvd-2026-255358 https://cve.radiocsirt.org/vuln/fkie_cve-2025-51471 <p>Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint.</p> <p>Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-51471 https://cve.radiocsirt.org/vuln/ghsa-x9hg-5q6g-q3jr <p><strong>Affected:</strong> Go: github.com/ollama/ollama</p> <p>Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint.</p> <p><strong>Affected:</strong> Go: github.com/ollama/ollama</p> <p>Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint.</p> https://cve.radiocsirt.org/vuln/ghsa-x9hg-5q6g-q3jr https://cve.radiocsirt.org/vuln/opensuse-su-2025:15405-1 <p>govulncheck-vulndb-0.0.20250730T213748-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20250730T213748-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15405-1 https://cve.radiocsirt.org/vuln/pysec-2025-147 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> PyPI: ollama</p> <p>Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> PyPI: ollama</p> <p>Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint.</p> https://cve.radiocsirt.org/vuln/pysec-2025-147