Week 45, updated 2 Nov 2026

Local AI Ollama

Is Ollama safe?

Short answer: Caution. StackGrade's weekly scan of ollama/ollama gives it a Caution label for 2 critical-severity known vulnerabilities in runtime dependencies (OSV). It does list 11 high-severity advisories in runtime dependencies, which don't change the label. Critical advisories are counted once per package; a known issue in a locked package version does not prove Ollama is exploitable in your setup. Automated scan of commit c1db5f9 on 2 Nov 2026, not a manual audit.

Updated : the last week its score, rank or safety result changed.

Run open models like Qwen, DeepSeek, Gemma and gpt-oss locally with one command.

  • 185,623 stars
  • pushed 2 Nov
  • MIT
  • Go

github.com/ollama/ollama · ollama.com

73score out of 100

#2of 52 overall#1in Local AI▲ 1 vs Week 44

  • Maintenance 30%67
  • Adoption 30%81
  • Docs 20%69
  • Community 20%–
W42W43W44W45

Score over the last 4 weeks: 71, 74, 72, 73.

Caution

2 critical-severity known vulnerabilities in runtime dependencies (OSV).

How this score works

Each part is a percentile among all 52 tracked tools, so 50 is average for this list. Community is not measured yet; the score uses the other 80%.

  • Maintenance: Last push 2 Nov 2026. Last 10 GitHub releases within 6 days (about 49 per 30 days), latest release 29 Oct 2026. Median 17.2 h to close an issue (12 closed issues).
  • Adoption: 185,623 stars (70%), 18,859 forks (30%).
  • Docs: README 19,345 characters, 29 headings, 12 code blocks, install section: yes.

Methodology

#1 of 5 in Local AI

Ranked by score. The yellow row is this tool.

Local AI, Week 45score 0–100, safety
  1. 1Ollama#2 overall73Caution
  2. 2LobeHub#7 overall69Caution
  3. 3Open WebUI#8 overall68Caution
  4. 4llama.cpp#9 overall68Caution
  5. 5vLLM#24 overall54Caution

Safety scan, 2 Nov 2026

Automated scan of commit c1db5f9, 1,220 files. Not a manual audit.

Caution

  • 2Critical dependency advisories11 high, 25 medium, 5 low. OSV, runtime dependencies only.
  • 0Install hooksNo npm install scripts found.
  • 0Remote-code patternsFor example eval(fetch(…)).
  • 2Agent files checked0 phrases flagged for review.
  • 6curl | sh installersIn docs or program code. Information only.
Why this label?

Why this label:

  • 2 critical-severity known vulnerabilities in runtime dependencies (OSV)

Known vulnerabilities in runtime dependencies (OSV): 2 critical, 11 high, 25 medium, 5 low, 6 unrated

  • seroval@1.3.2 (GHSA-mv8w-475r-vwqw) in app/ui/app/package-lock.json
  • seroval@1.3.2 (GHSA-p6vx-979v-rg4c) in app/ui/app/package-lock.json

Also found (informational, does not change the label):

  • 11 high-severity known vulnerabilities in runtime dependencies (OSV)
  • Program code runs a curl|sh style installer (6 occurrences, e.g. cmd/launch/claude.go)
  • Documents curl|sh style installer (1 occurrence, e.g. README.md)

Notes:

  • 34 affected packages only in dev/test/docs manifests, not counted
  • Telemetry/analytics references in code: telemetry

Automated scan of commit c1db5f9 on 2 Nov 2026, not a manual audit. 1,220 files checked. What we check

Ollama safety in detail

Scan result: StackGrade's automated weekly scan of the public ollama/ollama repo (commit c1db5f9, scanned 2 Nov 2026, 1,220 files checked) gives it a Caution label for 2 critical-severity known vulnerabilities in runtime dependencies (OSV). It is an automated check, not a manual security audit.

Read the full answer

Ollama scores 73/100 this week (#2 of 52 overall, #1 in Local AI). Highest-scored alternatives in Local AI: LobeHub (69, Caution), Open WebUI (68, Caution), llama.cpp (68, Caution), vLLM (54, Caution).

Is Ollama safe to run locally? What Ollama documents

  • It listens only on your own machine by default. “Ollama binds 127.0.0.1 port 11434 by default.” It becomes reachable from your network only if you change OLLAMA_HOST; if you do, put authentication in front of it.
  • Local prompts stay local. “Ollama runs locally. We don't see your prompts or data when you run locally.” Cloud-hosted models are a separate service.
  • Cloud features can be switched off with OLLAMA_NO_CLOUD=1 or "disable_ollama_cloud": true in ~/.ollama/server.json.
  • Browser access is limited: other origins than 127.0.0.1 and 0.0.0.0 need OLLAMA_ORIGINS.

Sources: Ollama FAQ · Ollama SECURITY.md.

Compare: Ollama vs llama.cpp · Ollama vs Open WebUI · LobeHub vs Ollama · Run AI models locally

Repo activity

From the GitHub API, fetched 2 Nov 2026.

  • 10+Releases, 90 daysLatest v0.40.13, 29 Oct
  • 17hMedian issue closeOver 12 closed issues
  • 186kStars+839 since 26 Oct
  • 18.9kForks4,540 open issues
  • 2023Repo created26 Jun 2023
30 days ago2 Nov
10 releases in the last 30 days, one mark each (GitHub releases feed, last 10 entries).

10 releases in the last 30 days (GitHub releases feed, last 10 entries):

Questions about Ollama

Answers use this week's StackGrade data.

Is Ollama safe to use?

Caution. StackGrade's weekly scan of ollama/ollama gives it a Caution label for 2 critical-severity known vulnerabilities in runtime dependencies (OSV). It does list 11 high-severity advisories in runtime dependencies, which don't change the label. Critical advisories are counted once per package; a known issue in a locked package version does not prove Ollama is exploitable in your setup. Automated scan of commit c1db5f9 on 2 Nov 2026, not a manual audit.

How does StackGrade score Ollama?

Ollama scores 73 out of 100 in Week 45: #2 of 52 tracked tools overall and #1 in Local AI. The score combines maintenance (67), adoption (81) and docs (69) as percentiles among all 52 tracked tools; community (20% weight) is not measured yet, so the score uses the other 80%. It is not a hands-on test and it is separate from the safety label.

What are the alternatives to Ollama?

The highest-scored other tools in Local AI this week: LobeHub (69, Caution), Open WebUI (68, Caution), llama.cpp (68, Caution), vLLM (54, Caution). StackGrade has not tested them hands-on.

What licence does Ollama use?

The licence listed for ollama/ollama is MIT. Read the licence text before commercial use.

Compare and use it

All facts and sources
Type
AI tool
License
MIT
Language
Go
Created
26 Jun 2023
Owner
ollama (Organization)
Forks
18,859
Homepage
ollama.com

GitHub description: “Get up and running with Kimi, GLM, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.”

Sources: github.com/ollama/ollama, api.github.com/repos/ollama/ollama, raw.githubusercontent.com/ollama/ollama/main/README.md. Fetched 2 Nov 2026.

Know when Ollama changes label

One email a week: the new top 10, the biggest score changes and every safety label that changed.

Free. Double opt-in: you confirm by email first, unsubscribe in one click.