Security Bulletin: Multiple Vulnerabilities affect IBM Watson Studio in Cloud Pak for Data.

Summary Multiple vulnerabilities have been addressed in IBM Watson Studio in Cloud Pak for Data version 5.2.2 Vulnerability Details CVEID:CVE-2024-3568 DESCRIPTION: The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the...

Linux Distros Unpatched Vulnerability : CVE-2025-8747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A safe mode bypass vulnerability in the Model.loadmodel method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by...

MAL-2025-8747 Malicious code in @malware-test-koans-wowed-kayle-palay/test-mlw3-koans-wowed-kayle-palay (npm)

The package @malware-test-koans-wowed-kayle-palay/test-mlw3-koans-wowed-kayle-palay was found to contain malicious code...

CVE-2025-8747 vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter, tensorflow-gpu-jupyter...

CVE-2025-8747 vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

decima2 (>=0.1.0 <=0.2.1), gpbench (>=1.0.3 <=1.2.2) +8 more potentially affected by CVE-2025-8747 via keras (>=3.0.0 <=3.10.0)

keras PYPI version =3.0.0, =0.1.0, =1.0.3, =0.0.28, =2.4.0, =0.1.0, =0.1.1, =1.1.0, =1.0.0, =1.2.0 Source cves: CVE-2025-8747 Source advisory: OSV:GHSA-C9RC-MG46-23W3...

CVE-2025-8747

creationtimestamp| type| source ---|---|--- 2025-08-11 09:01:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lw4gprlg442m 2025-08-11 11:51:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw4q7h3ze52a 2025-08-11 22:55:09+00:00| published-proof-of-concept|...

CVE-2025-8747

A safe mode bypass vulnerability in the Model.loadmodel method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted .keras model archive...

CVE-2025-8747

A safe mode bypass vulnerability in the Model.loadmodel method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted .keras model archive...

decima2 (>=0.1.0 <=0.2.1), gpbench (>=1.0.3 <=1.2.2) +8 more potentially affected by CVE-2025-8747 via keras (>=3.0.0 <=3.10.0)

keras PYPI version =3.0.0, =0.1.0, =1.0.3, =0.0.28, =2.4.0, =0.1.0, =0.1.1, =1.1.0, =1.0.0, =1.2.0 Source cves: CVE-2025-8747 Source advisory: SNYK:PYTHON-KERAS-11775502...