Security vulnerability affects the ollama-fips package. The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing.