there are 2 kinds of "memory leaks", first one is what you describe: when an app eats much more memory than required, because vibecoders forgot to free() unused memory, and the second one is when an app returns parts of its reserved memory (or even worse parts of system memory) to the user sending a specially crafted request, these parts of memory could contain logins, passwords, encryption keys and other sensitive information. I did not check the OP link but judging by words "Critical Unauthenticated" this is the second kind of memory leak which means that if your ollama instance is open to the whole Internet then you are fucked.