Is ollama safe to use?

ollama has 1 known vulnerabilities on the latest version (0.6.2). DepScope rates its health at 60/100 (moderate risk).

What is the latest version of ollama?

The latest version of ollama is 0.6.2, released 2026-04-29.

Does ollama have known vulnerabilities?

Yes. ollama has 1 known vulnerabilities. See depscope.dev/pkg/pypi/ollama for details.

Is ollama deprecated?

No, ollama is actively maintained. Latest release: 0.6.2 (2026-04-29).

What are alternatives to ollama?

Popular alternatives to ollama in PyPI include: urllib3, typing_extensions, charset-normalizer, charset_normalizer, setuptools.

ollama

pypiv0.6.2

The official Python client for Ollama.

License MITpermissive35 versions2 deps4,709,571 weekly dl

/ 100

Health

update required

[email protected] has vulnerabilities — update to latest

Moderate health score (60/100) — verify manually
1 high severity vulnerabilities

Health breakdown0 – 100

20/25

maintenance

17/20

popularity

20/25

security

12/15

maturity

0/15

community

0/15

popularity_floor

Vulnerabilities

1 high

Advisories (1)

Severity	ID	Summary	Fixed in
high	CVE-2026-15685	Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloadBlob function. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated array. An attacker can levera	—

Quality signals

Publish security

API token

Health History

Dependency Tree

License Audit

Dependencies (2)

httpx pydantic

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/ollama

ollama

pypiv0.6.2

The official Python client for Ollama.

License MITpermissive35 versions2 deps4,709,571 weekly dl

/ 100

Health

update required

[email protected] has vulnerabilities — update to latest

Moderate health score (60/100) — verify manually
1 high severity vulnerabilities

Health breakdown0 – 100

20/25

maintenance

17/20

popularity

20/25

security

12/15

maturity

0/15

community

0/15

popularity_floor

Vulnerabilities

1 high

Advisories (1)

Severity	ID	Summary	Fixed in
high	CVE-2026-15685	Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloadBlob function. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated array. An attacker can levera	—

Quality signals

Publish security

API token

Health History

Dependency Tree

License Audit

Dependencies (2)

httpx pydantic

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/ollama