Vulnerability Reportollama/ollama:0.32.3

ollama/ollama:0.32.3
digestsha256:ec24bcaa2a810eb74171ce7c517813ef4821ed678988845e8d76cf62467036d4

Executive Summary

Last scanned:

Threat Score
0/100NEEDS ATTENTION
Reputation
RELIABLE

AI verdict failed due to an error.

Vulnerabilities

Vulnerability Log

106 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-41992LOW3.82
gzip
1.12-1ubuntu3.1
fixed in 1.12-1ubuntu3.2
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-45582LOW2.86
tar
1.35+dfsg-3build1
fixed in 1.35+dfsg-3ubuntu0.2
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-5704LOW2.8
tar
1.35+dfsg-3build1
fixed in 1.35+dfsg-3ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.39.3-9ubuntu6.5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-41991LOW2.4
gzip
1.12-1ubuntu3.1
fixed in 1.12-1ubuntu3.2
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.39.3-9ubuntu6.5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.39.3-9ubuntu6.5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8376NONE0
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-42496NONE0
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-39828NONE0
golang.org/x/crypto
v0.43.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-39832NONE0
golang.org/x/crypto
v0.43.0
fixed in 0.52.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-39821NONE0
golang.org/x/net
v0.46.0
fixed in 0.55.0
0.7%
Theoretical Threat
Not Applicable
CVE-2026-33810NONE0
stdlib
v1.26.0
fixed in 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39831NONE0
golang.org/x/crypto
v0.43.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-25681NONE0
golang.org/x/net
v0.46.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-27136NONE0
golang.org/x/net
v0.46.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
libncursesw6
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
libtinfo6
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-base
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-bin
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2026-39822NONE0
stdlib
v1.26.0
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.2%
Theoretical Threat
Not Applicable
CVE-2025-1352NONE0
libelf1t64
0.190-1.1ubuntu0.1
No fix yet
0.7%
Theoretical Threat
Not Applicable
CVE-2026-32285NONE0
github.com/buger/jsonparser
v1.1.1
fixed in 1.1.2
0.8%
Theoretical Threat
Not Applicable
CVE-2026-39829NONE0
golang.org/x/crypto
v0.43.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-39830NONE0
golang.org/x/crypto
v0.43.0
fixed in 0.52.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-39835NONE0
golang.org/x/crypto
v0.43.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-46597NONE0
golang.org/x/crypto
v0.43.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-33814NONE0
golang.org/x/net
v0.46.0
fixed in 0.53.0
0.8%
Theoretical Threat
Not Applicable
CVE-2026-25679NONE0
stdlib
v1.26.0
fixed in 1.25.8, 1.26.1
0.7%
Theoretical Threat
Not Applicable
CVE-2026-27137NONE0
stdlib
v1.26.0
fixed in 1.26.1
0.6%
Theoretical Threat
Not Applicable
CVE-2026-27145NONE0
stdlib
v1.26.0
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2026-32280NONE0
stdlib
v1.26.0
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-32281NONE0
stdlib
v1.26.0
fixed in 1.25.9, 1.26.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32283NONE0
stdlib
v1.26.0
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-33811NONE0
stdlib
v1.26.0
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-33814NONE0
stdlib
v1.26.0
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-39820NONE0
stdlib
v1.26.0
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-39836NONE0
stdlib
v1.26.0
fixed in 1.25.10, 1.26.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42499NONE0
stdlib
v1.26.0
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-42504NONE0
stdlib
v1.26.0
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42508NONE0
golang.org/x/crypto
v0.43.0
fixed in 0.52.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-46595NONE0
golang.org/x/crypto
v0.43.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-5222NONE0
libicu74
74.2-1ubuntu3.1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-4437NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-6238NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-4437NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-6238NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-39827NONE0
golang.org/x/crypto
v0.43.0
fixed in 0.52.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39834NONE0
golang.org/x/crypto
v0.43.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-33809NONE0
golang.org/x/image
v0.22.0
fixed in 0.38.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-33813NONE0
golang.org/x/image
v0.22.0
fixed in 0.42.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-46599NONE0
golang.org/x/image
v0.22.0
fixed in 0.41.0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-46601NONE0
golang.org/x/image
v0.22.0
fixed in 0.43.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-25680NONE0
golang.org/x/net
v0.46.0
fixed in 0.55.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39825NONE0
stdlib
v1.26.0
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32282NONE0
stdlib
v1.26.0
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-13757NONE0
libp11-kit0
0.25.3-4ubuntu2.1
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-33812NONE0
golang.org/x/image
v0.22.0
fixed in 0.39.0
0.1%
Theoretical Threat
Not Applicable
CVE-2026-42502NONE0
golang.org/x/net
v0.46.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-32289NONE0
stdlib
v1.26.0
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-5435NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.2%
Theoretical Threat
Not Applicable
CVE-2026-5435NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.2%
Theoretical Threat
Not Applicable
CVE-2024-2236NONE0
libgcrypt20
1.10.3-2ubuntu0.1
No fix yet
1.1%
Low-Moderate Risk
Not Applicable
CVE-2025-66382NONE0
libexpat1
2.6.1-2ubuntu0.4
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-27171NONE0
zlib1g
1:1.3.dfsg-3.1ubuntu2.1
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-39833NONE0
golang.org/x/crypto
v0.43.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32288NONE0
stdlib
v1.26.0
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42506NONE0
golang.org/x/net
v0.46.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-27142NONE0
stdlib
v1.26.0
fixed in 1.25.8, 1.26.1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39823NONE0
stdlib
v1.26.0
fixed in 1.25.10, 1.26.3
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39826NONE0
stdlib
v1.26.0
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-4046NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-4046NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2025-47914NONE0
golang.org/x/crypto
v0.43.0
fixed in 0.45.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-58181NONE0
golang.org/x/crypto
v0.43.0
fixed in 0.45.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-46598NONE0
golang.org/x/crypto
v0.43.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-42505NONE0
stdlib
v1.26.0
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42507NONE0
stdlib
v1.26.0
fixed in 1.25.11, 1.26.4
0.4%
Theoretical Threat
Not Applicable
CVE-2026-5450NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5928NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-5450NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5928NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules-bin
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-runtime
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam0g
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-27456NONE0
libblkid1
2.39.3-9ubuntu6.5
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2025-1376NONE0
libelf1t64
0.190-1.1ubuntu0.1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-27456NONE0
libmount1
2.39.3-9ubuntu6.5
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-27456NONE0
libsmartcols1
2.39.3-9ubuntu6.5
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-27456NONE0
libuuid1
2.39.3-9ubuntu6.5
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-4438NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-4438NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-27138NONE0
stdlib
v1.26.0
fixed in 1.26.1
0.4%
Theoretical Threat
Not Applicable
CVE-2024-56433NONE0
login
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-40228NONE0
libsystemd0
255.4-1ubuntu8.16
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-40228NONE0
libudev1
255.4-1ubuntu8.16
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-27139NONE0
stdlib
v1.26.0
fixed in 1.25.8, 1.26.1
0.2%
Theoretical Threat
Not Applicable
GO-2026-5932NONE0
golang.org/x/crypto
v0.43.0
No fix yet
—
Not Applicable
CVE-2026-46602NONE0
golang.org/x/image
v0.22.0
fixed in 0.43.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-46604NONE0
golang.org/x/image
v0.22.0
fixed in 0.43.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42500NONE0
golang.org/x/image
v0.22.0
fixed in 0.41.0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-46600NONE0
golang.org/x/net
v0.46.0
fixed in 0.56.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39824NONE0
golang.org/x/sys
v0.37.0
fixed in 0.44.0
0.1%
Theoretical Threat
Not Applicable
CVE-2026-56852NONE0
golang.org/x/text
v0.30.0
fixed in 0.39.0
0.4%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.