Vulnerability Reportollama/ollama:0.40.8

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker could exploit malformed inputs in bundled Go libraries to trigger denial-of-service or resource exhaustion, disrupting the Ollama model-serving service. INPUT 3 shows 103 exposed vulnerabilities, with 40 at severity 6.0 or higher and 0 at severity 7.0 or higher, so the most impactful issues are denial-of-service flaws such as CVE-2026-32285 and CVE-2026-63209. Restricting network access to the Ollama service would eliminate remote exploitation of these denial-of-service findings.