{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.3.14"}],"component":"github.com/ollama/ollama","cve_ids":["CVE-2024-12886"],"ecosystem":"Go","epss":0.00733,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-v464-r2r9-www7","id":"tcs_01M5KFNHGVT645ENNY3RF6YTVA","modified_at":"2025-03-31T17:44:33.215400Z","published_at":"2025-03-20T12:32:44Z","references":["https://osv.dev/vulnerability/GHSA-v464-r2r9-www7","https://nvd.nist.gov/vuln/detail/CVE-2024-12886","https://github.com/ollama/ollama","https://huntr.com/bounties/f115fe52-58af-4844-ad29-b1c25f7245df"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-v464-r2r9-www7","url":"https://osv.dev/vulnerability/GHSA-v464-r2r9-www7"}],"summary":"Ollama Vulnerable to Denial of Service (DoS) via Crafted GZIP"}