Vulnerability Reportollama/ollama:0.35.1

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. It has 104 exposed findings, including 36 with severity 6.0 or higher (max 6.38), largely denial-of-service issues in Go components such as CVE-2026-32285 and CVE-2026-63209. An attacker able to reach the Ollama service could send crafted inputs to crash the process or exhaust resources, disrupting availability. The 23 post-exploit findings are lower severity (max 2.8) and do not change the verdict. Restricting network access to the Ollama service to trusted clients would fully eliminate remote exploitation of these denial-of-service CVEs.