Affected: 3.0 to 11.0, if your server accepts custom models from untrusted clients.
Fix: upgrade to 11.1. There is no fix for 10.x and older versions.
Workaround: reject requests containing custom_model or remove it from the request.
Thanks to Ilyass for the responsible disclosure!
CVE still pending.