Ollama 0.6.7 -
Approved changes feed: RSS · Atom
cpe:2.3:a:ollama:ollama:0.6.7:-:*:*:*:*:*:*
part: a version: 0.6.7 update: -
| Vendor | Ollama (b06225ec-63c0-528e-9999-b77fe3f3edf5) |
|---|---|
| Product | Ollama (6b78705f-f0b9-53c4-aeb4-6742e30b408c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/ollama/ollama |
purl2cpe | 2026-06-01 10:14:59.448458 |
pkg:golang/github.com/ollama/ollama |
purl2cpe | 2026-06-01 10:14:59.448459 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-51471 |
vulnerable | 2026-06-08 07:31:11.203607 |
Details available
Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint.
Published: 2025-07-22T00:00:00.000Z
Updated: 2025-10-17T17:49:49.480Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.