CVE-2025-51471 in Ollama 0.6.7

[moshiko-s]

https://nvd.nist.gov/vuln/detail/CVE-2025-51471

[josephwoodward]

Thank you for raising this @moshiko-s. Unfortunately, we're still waiting for the fix to be merged. As soon as it is then we can upgrade to address the CVE.

[rockwotj]

note we only use the client in ollama, so this also doesn't effect redpanda connect

[rockwotj]

@josephwoodward we should consider just writing our own client or forking out the client into our code base, which is really small and doesn't have these CVEs