EUVD-2025-37039

🗓️ 02 Dec 2025 00:58:33Reported by EUVDType

Keras get_file tar extract path traversal via symlinks; fix requires Python CVE-2025-4517 patch and Keras 3.12.

Reporter	Title	Published	Views	Family All 66
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Python affect IBM Robotic Process Automation	16 Jan 202616:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which are vulnerable to CVEs.	29 Dec 202505:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in keras-3.11.3-py3-none-any.whl	4 Feb 202622:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses keras-3.10.0-py3-none-any.whl, keras-2.14.0-py3-none-any.whl which are vulnerable to CVE-2025-12058, CVE-2025-12060, CVE-2025-9905, CVE-2025-9906.	30 Jan 202605:35	–	ibm
IBM Security Bulletins	Security Bulletin: Arbitrary File Read, SSRF, and Code Execution Vulnerabilities in TensorFlow Keras Model Loading (v2.13) affects watsonx.data	8 Apr 202608:40	–	ibm
Huntr	Path Traversal in Keras Archive Extraction via CWD Validation Bypass Leading to Arbitrary File Write	13 Mar 202613:22	–	huntr
Huntr	Path traversal via startswith() prefix confusion in is_path_in_dir (bypass of CVE-2025-12638 fix)	21 Feb 202606:25	–	huntr
Huntr	Path Traversal vulnerability in keras using tar extract	30 Aug 202514:05	–	huntr
BDU FSTEC	The vulnerability of the keras.utils.get_file() function in the Keras library allows a hacker to execute arbitrary code.	21 Apr 202600:00	–	bdu_fstec
CBLMariner	CVE-2025-12060 affecting package keras for versions less than 3.3.3-5	6 Nov 202515:48	–	cbl_mariner

[
  {
    "enisaIdVendor": [
      {
        "id": "ecaee992-dc5a-3b07-a2ec-9ce40c0ae307",
        "vendor": {
          "name": "Keras"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "2fd6c293-f9af-3f43-a5e1-f934b8fae9fd",
        "product": {
          "name": "keras"
        },
        "product_version": "3.0.0 ≤3.11.3"
      }
    ]
  }
]

Source	Link
github	www.github.com/keras-team/keras/pull/21760
github	www.github.com/keras-team/keras/security/advisories/GHSA-hjqc-jx6g-rwp9
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-12060
github	www.github.com/keras-team/keras/commit/47fcb397ee4caffd5a75efd1fa3067559594e951
huntr	www.huntr.com/bounties/f94f5beb-54d8-4e6a-8bac-86d9aee103f4
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-12638

02 Dec 2025 00:58Current

7.6High risk

Vulners AI Score7.6

CVSS 48.9

CVSS 38

EPSS0.00593

SSVC