https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-17T15:56:13.861816+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/ghsa-x9hg-5q6g-q3jr GHSA-x9hg-5q6g-q3jr — Ollama vulnerable to Cross-Domain Token Exposure 2026-10-17T15:56:13.862656+00:00

Affected: Go: github.com/ollama/ollama

Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint.