Low
osv
·
PYSEC-2026-102
PYSEC-2026-102
Published Jan 21, 2026
CVSS 3.1
An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs/ggml/gguf.go, function readGGUFV1String reads a string length from untrusted GGUF metadata
Affected AI Products
ollama