tests: Add new expected vulnerabilities to test results

* tests: Add new expected vulnerabilities to test results

* fix: Change DB update schedule

Author: afsmeira

.circleci/config.yml

@@ -62,8 +62,8 @@ workflows:
   update_vulnerability_dbs:
     triggers:
       - schedule:
-          # this is running at 3am everyday to avoid doing it at midnight (same time as nightly)
-          cron: "0 3 * * *"
+          # this is running at 2am everyday to avoid doing it at midnight (same time as nightly)
+          cron: "0 2 * * *"
           filters:
             branches:
               only:

docs/multiple-tests/pattern-vulnerability/results.xml

@@ -22,6 +22,30 @@
             message="Insecure dependency golang/github.com/ollama/ollama@v0.1.46 (CVE-2024-45436: Ollama can extract members of a ZIP archive outside of the parent directory) (update to 0.1.47)"
             severity="error"
         />
+        <error
+            source="vulnerability"
+            line="8"
+            message="Insecure dependency golang/github.com/ollama/ollama@v0.1.46 (CVE-2024-12055: ollama: DoS using malicious gguf model file in ollama/ollama) (no fix available)"
+            severity="error"
+        />
+        <error
+            source="vulnerability"
+            line="8"
+            message="Insecure dependency golang/github.com/ollama/ollama@v0.1.46 (CVE-2024-12886: ollama: Out-Of-Memory (OOM) Vulnerability in ollama/ollama) (no fix available)"
+            severity="error"
+        />
+        <error
+            source="vulnerability"
+            line="8"
+            message="Insecure dependency golang/github.com/ollama/ollama@v0.1.46 (CVE-2025-0315: ollama: Allocation of Resources Without Limits or Throttling in ollama/ollama) (no fix available)"
+            severity="error"
+        />
+        <error
+            source="vulnerability"
+            line="8"
+            message="Insecure dependency golang/github.com/ollama/ollama@v0.1.46 (CVE-2025-0317: ollama: Divide By Zero in ollama/ollama) (no fix available)"
+            severity="error"
+        />
         <!-- stdlib -->
         <error
             source="vulnerability"