StackRadar

CVE-2026-7482

Critical

Advisory

Published 4 May 2026In the index since 21 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.007
52nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2
of 18,090 indexed, latest versions
Container images
2
deployed by those charts
Fix available
1 of 1
affected package

Ollama contains a heap out-of-bounds read vulnerability in the GGUF model loader

Carried by container images the latest versions of 2 of 18,090 indexed charts deploy, on 2 images.

Affected packageAffected versionsFixed inImages
github.com/ollama/ollamagolangv0.4.20.17.12
OSV records
GHSA-x8qc-fggm-mpqg
Also known as
GO-2026-5748

Charts affected

2 by stars
ChartLatestAffected imagesRadar Score
vector-store-manager-servervector-store-manager-server1.8.01 of 1See more

vector-store-manager-server vector-store-manager-server 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-7482.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/vector-store-manager-server:1.8.0ced619de4c6d
github.com/ollama/ollama@v0.4.2
0.17.1

Open the chart page →

1,193
llmarinerllmariner1.53.11 of 21See more

llmariner llmariner 1.53.1

1 of the 21 container images this version deploys carry CVE-2026-7482.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/vector-store-manager-server:1.7.0f1f6b884b325
github.com/ollama/ollama@v0.4.2
0.17.1

Open the chart page →

21,531

Container images carrying it

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/cloudnatix/llmariner/vector-store-manager-server:1.8.0ced619de4c6d
github.com/ollama/ollama@v0.4.2
0.17.1
1
public.ecr.aws/cloudnatix/llmariner/vector-store-manager-server:1.7.0f1f6b884b325
github.com/ollama/ollama@v0.4.2
0.17.1
1

syft 1.42.1 · advisories as of 11 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.