Vulnerability Reportollama/ollama:0.32.15

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker could exploit memory corruption or parsing flaws in libraries such as libexpat, PCRE2, or libxml2 to execute arbitrary code, corrupt memory, or cause denial of service, although the highest exposed severity is 6.63 and the most dangerous paths require local access or attacker-controlled parser/JIT inputs. The image has 183 exposed and 65 post-exploit findings, but no exposed finding reaches severity 7.0 and post-exploit findings are low severity. Keeping the service isolated from untrusted XML, regular expressions, and unnecessary local users would fully eliminate the practical reachability of CVE-2026-76957 and CVE-2026-89161.