CVE Program partner
Echo
Echo Software Ltd.
CVEs, 365 days11 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
| Organisation | Echo Software Ltd. |
| Role | CNA |
| Type | Vendor, Open Source, Researcher |
| Reports to | mitre |
| Scope | Vulnerabilities in Echo products, as well as vulnerabilities discovered by or reported to Echo that are not in another CNA’s scope. |
| Advisories | https://www.echohq.com/vulnerability-disclosure |
Latest CVEs · RSS
- CVE-2026-7482 2026-05-04 · CVSS 9.1Ollama before 0.17.1 contains a heap out-of-bounds read vulnerability in the GGUF model loader. The /api/create endpoint accepts an attacker-supplied GGUF file