{"action":"Upgrade github.com/ollama/ollama to 0.4.0-ci1 or later.","affected":[{"fixed":"0.4.0-ci1","introduced":"0"}],"component":"github.com/ollama/ollama","cve_ids":["CVE-2024-12886"],"ecosystem":"Go","epss":0.00733,"exploited":false,"fixed_versions":["0.4.0-ci1"],"ghsa_id":"GHSA-v464-r2r9-www7","id":"tcs_01M5KG7K915B36023PPQVNC6T7","modified_at":"2026-05-21T18:15:09.808022686Z","published_at":"2025-03-31T17:03:53Z","references":["https://osv.dev/vulnerability/GO-2025-3548","https://github.com/advisories/GHSA-v464-r2r9-www7","https://huntr.com/bounties/f115fe52-58af-4844-ad29-b1c25f7245df"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2025-3548","url":"https://osv.dev/vulnerability/GO-2025-3548"}],"summary":"Ollama Vulnerable to Denial of Service (DoS) via Crafted GZIP in github.com/ollama/ollama"}