{"action":"Upgrade github.com/ollama/ollama to 0.17.1 or later.","affected":[{"fixed":"0.17.1","introduced":"0"}],"component":"github.com/ollama/ollama","cve_ids":["CVE-2026-7482"],"ecosystem":"Go","epss":0.00713,"exploited":false,"fixed_versions":["0.17.1"],"ghsa_id":"GHSA-x8qc-fggm-mpqg","id":"tcs_01M5KGPJ69DVSBKSSWDX9JNP15","modified_at":"2026-07-27T17:00:22.536508632Z","published_at":"2026-07-27T15:30:50Z","references":["https://osv.dev/vulnerability/GO-2026-5748","https://github.com/advisories/GHSA-x8qc-fggm-mpqg","https://github.com/ollama/ollama/commit/88d57d0483cca907e0b23a968c83627a20b21047","https://github.com/ollama/ollama/pull/14406","https://github.com/ollama/ollama/releases/tag/v0.17.1"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-5748","url":"https://osv.dev/vulnerability/GO-2026-5748"}],"summary":"Ollama contains a heap out-of-bounds read vulnerability in the GGUF model loader in github.com/ollama/ollama"}