The Ollama maintainer team takes security seriously and will actively work to resolve security issues.

If you discover a security vulnerability, please do not open a public issue. Instead, please report it by emailing [email protected]. We ask that you give us sufficient time to investigate and address the vulnerability before disclosing it publicly.

Please include the following details in your report:

• A description of the vulnerability
• Steps to reproduce the issue
• Your assessment of the potential impact
• Any possible mitigations

While the maintainer team does their best to secure Ollama, users are encouraged to implement their own security best practices, such as:

• Regularly updating to the latest version of Ollama
• Securing access to hosted instances of Ollama
• Monitoring systems for unusual activity

For any other questions or concerns related to security, please contact us at [email protected]