Skip to content
Download.sa Download.sa
Install Download.sa on iPhone or iPad: tap the Share button, then choose “Add to Home Screen”.

Security center

Known vulnerabilities affecting catalog software, matched against versions. Sources: OSV (incl. GitHub advisories) and the CISA KEV catalog.

High

rclone CVE-2026-88017

rclone: FTP cross-session auth-proxy backend confusion

Fixed in 1.75.1
Fixed in the latest version
10 Sep 2026
High

rclone CVE-2026-88045

rclone: S3 multipart declared-length memory exhaustion

Fixed in 1.75.1
Fixed in the latest version
10 Sep 2026
High

rclone CVE-2026-59733

rclone `serve restic --private-repos` authorization bypass: `..` in the URL path lets an authenticated user read, overwrite and delete other users' repositories

Fixed in 1.74.4
Fixed in the latest version
5 Aug 2026
High

rclone CVE-2026-71312

rclone: PowerShell Smart-Quote Filename Injection Enables SFTP Server-Side Command Execution

Fixed in 1.75.0
Fixed in the latest version
5 Aug 2026
High

rclone CVE-2026-54572

rclone: Unvalidated symlink target in local `--links` — arbitrary file write from an untrusted remote

Fixed in 1.74.4
Fixed in the latest version
5 Aug 2026
High

rclone CVE-2026-71309

rclone: Incomplete path validation allows backend root escape in serve restic

Fixed in 1.75.0
Fixed in the latest version
5 Aug 2026
High

Ansible CVE-2026-11332

ansible-core: Argument injection in ansible-galaxy role install leads to arbitrary code execution

Fixed in 2.21.1rc1
Fixed in the latest version
5 Jun 2026
High

Ollama CVE-2025-1975

Ollama Server Vulnerable to Denial of Service (DoS) Attack

Affects the latest catalog version
16 May 2025
High

Ollama CVE-2025-0317

Ollama Divide By Zero vulnerability

Affects the latest catalog version
20 Mar 2025
High

Ollama CVE-2025-0315

Ollama Allocation of Resources Without Limits or Throttling vulnerability

Affects the latest catalog version
20 Mar 2025
High

Ollama CVE-2025-0312

Ollama Denial of Service (DoS) via Null Pointer Dereference

Affects the latest catalog version
20 Mar 2025
High

Ollama CVE-2024-8063

Ollama Divide by Zero Vulnerability

Affects the latest catalog version
20 Mar 2025
High

Ollama CVE-2024-12886

Ollama Vulnerable to Denial of Service (DoS) via Crafted GZIP

Affects the latest catalog version
20 Mar 2025
High

Ollama CVE-2024-12055

Ollama Allows Out-of-Bounds Read

Affects the latest catalog version
20 Mar 2025
High

Ollama CVE-2024-39720

Ollama Out-of-bounds Read

Fixed in 0.1.46
Fixed in the latest version
31 Oct 2024
High

Ollama CVE-2024-45436

Ollama can extract members of a ZIP archive outside of the parent directory

Fixed in 0.1.47
Fixed in the latest version
29 Aug 2024
High

Ollama CVE-2024-28224

Ollama DNS rebinding vulnerability

Fixed in 0.1.29
Fixed in the latest version
8 Apr 2024
High

rclone CVE-2020-28924

Use of Cryptographically Weak Pseudo-Random Number Generator in Rclone

Fixed in 1.53.3
Fixed in the latest version
10 Jun 2021

Install Download.sa on your device

Open it from your home screen in one tap, in its own window.

Install Download.sa on iPhone or iPad: tap the Share button, then choose “Add to Home Screen”.