Post

btw make sure not to visit websites you dont trust with ollama running. attackers can access your internal ollama API using literal fetch() requests (CSRF ig). I don't see this problem being fixed so I'd might as well tell you about it. repost+follow to spread awareness 🤷✌️ Tell me if yall want a poc