Linux Distros Unpatched Vulnerability : CVE-2026-9906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a...

CVE-2026-9906

Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in keras-2.13.1-py3-none-any.whl

Summary IBM Watson Discovery Cartridge affected by vulnerability in keras-2.13.1-py3-none-any.whl Vulnerability Details CVEID:CVE-2025-9906 DESCRIPTION: The Keras Model.loadmodel method can be exploited to achieve arbitrary code execution, even with safemode=True. One can create a specially craft...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses keras-3.10.0-py3-none-any.whl, keras-2.14.0-py3-none-any.whl which are vulnerable to CVE-2025-12058, CVE-2025-12060, CVE-2025-9905, CVE-2025-9906.

Summary IBM Maximo Application Suite - Monitor Component uses keras-3.10.0-py3-none-any.whl, keras-2.14.0-py3-none-any.whl which are vulnerable to CVE-2025-12058, CVE-2025-12060, CVE-2025-9905, CVE-2025-9906. This bulletin contains information regarding the vulnerability and its fixture...

Linux Distros Unpatched Vulnerability : CVE-2025-9906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Keras Model.loadmodel method can be exploited to achieve arbitrary code execution, even with safemode=True. One can create a specially crafted .keras model...

CVE-2025-9906

The Keras Model.loadmodel method can be exploited to achieve arbitrary code execution, even with safemode=True. One can create a specially crafted .keras model archive that, when loaded via Model.loadmodel, will trigger arbitrary code to be executed. This is achieved by crafting a special...

keras-eval (>=0.0.4, <=0.0.8), keras-model-specs (>=0.0.17, <=0.0.24) +3 more potentially affected by CVE-2025-9906 via keras (2.1.4)

keras PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - keras-eval =0.0.4, =0.0.17, =0.0.21, =0.1.2, =0.5.2 Source cves: CVE-2025-9906 Source advisory: OSV:GHSA-36FQ-JGMW-4R9C...

auto-dl (0.1.1), azureml-contrib-brainwave (>=0.1.57, <=1.0.33) +8 more potentially affected by CVE-2025-9906 via keras (2.1.5)

keras PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - auto-dl 0.1.1 - azureml-contrib-brainwave =0.1.57, =1.0.0, =0.1.2, =0.2.0, =1.0.0, =2.0.4, =0.1.0, =0.1.1 Source cves: CVE-2025-9906 Source advisory:...

adpred (>=1.1.2, <=1.2.7), aeronet (>=0.0.8, <=0.0.18) +57 more potentially affected by CVE-2025-9906 via keras (2.2.4)

keras PYPI version 2.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adpred =1.1.2, =0.0.8, =0.2.7, =0.0.1, =0.2.0rc0, =0.0.1, =0.1.3, =0.2.3, =1.1.0, =0.1.0, =0.0.4, =0.65.0, =0.66.0 and more Source cves: CVE-2025-9906...

diluvian (>=0.0.2, <=0.0.3), pyfiction (0.1.3) +2 more potentially affected by CVE-2025-9906 via keras (2.0.4)

keras PYPI version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - diluvian =0.0.2, =0.0.3 - pyfiction 0.1.3 - rldqn 0.0.5 - russtress 0.1.0 Source cves: CVE-2025-9906 Source advisory: OSV:GHSA-36FQ-JGMW-4R9C...

amber-automl (>=0.1.0, <=0.1.2), axelerate (>=0.5.2, <=0.5.6) +32 more potentially affected by CVE-2025-9906 via keras (2.2.5)

keras PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - amber-automl =0.1.0, =0.5.2, =0.2.6, =0.0.1, =0.1.13, =0.2.0, =0.0.3, =0.16.3, =0.9.6, =1.2.0, =0.0.1, =0.0.10 - monk-cpu 0.0.1 and more Source cves:...

a2grunnerp (>=0.1.0, <=0.1.8), academic-emotion (0.1.2) +113 more potentially affected by CVE-2025-9906 via keras (2.10.0)

keras PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - a2grunnerp =0.1.0, =0.1.1b2, =1.0.0, =0.0.2, =0.1.0, =7.2.0, =0.1.3, =0.1.8 and more Source cves: CVE-2025-9906 Source advisory: OSV:GHSA-36FQ-JGMW-4...

mlopspython-inference (>=67580760626172675.0.0, <=757069802391466481559610331145) potentially affected by CVE-2025-9906 via keras (2.12.0rc0)

keras PYPI version 2.12.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - mlopspython-inference =67580760626172675.0.0, =757069802391466481559610331145 Source cves: CVE-2025-9906 Source advisory: OSV:GHSA-36FQ-JGMW-4R9C...

lkmeans (>=0.0.1, <=0.0.2) potentially affected by CVE-2025-9906 via keras (2.13.1rc0)

keras PYPI version 2.13.1rc0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - lkmeans =0.0.1, =0.0.2 Source cves: CVE-2025-9906 Source advisory: OSV:GHSA-36FQ-JGMW-4R9C...

aadhaar-detection (0.5.0), accuinsight (>=1.0.84, <=1.0.87) +178 more potentially affected by CVE-2025-9906 via keras (2.8.0rc1)

keras PYPI version 2.8.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aadhaar-detection 0.5.0 - accuinsight =1.0.84, =0.1.11, =0.1.11, =0.6.3, =0.0.6, =0.0.1, =1.1.2, =1.1.17 and more Source cves: CVE-2025-9906 Source...

adpred (>=1.2.8, <=1.2.9), ax-env (>=0.2.2, <=0.2.4) +24 more potentially affected by CVE-2025-9906 via keras (2.8.0)

keras PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adpred =1.2.8, =0.2.2, =0.1.14, =1.1.9, =1.0.0, =1.1.1 - keras-flower 0.3.0 - napari-deepfinder 0.0.1 and more Source cves: CVE-2025-9906 Source...

ax-env (>=0.2.6, <=0.2.7), cbc (>=1.0.0, <=1.1.0) +18 more potentially affected by CVE-2025-9906 via keras (2.9.0)

keras PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - ax-env =0.2.6, =1.0.0, =0.3.0, =0.1.8, =1.0.0, =1.0.12, =0.6.1, =1.0.0, =0.1.7, =1.0.8rc18, =1.0.8rc19 and more Source cves: CVE-2025-9906 Source...

aggmap (>=1.1.1, <=1.2.1), ai-music-remixer (3.0.0) +112 more potentially affected by CVE-2025-9906 via keras (2.10.0rc1)

keras PYPI version 2.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aggmap =1.1.1, =0.0.157, =0.1.18, =0.1.11, =0.30.0, =0.0.13, =0.1.0, =0.1.1, =0.1.9 - automea 0.0.13 - avici 1.0.5 - basic-pitch 0.2.3 and more...

aigarmic (>=1.0.0, <=1.0.1), albedo (0.1.0) +130 more potentially affected by CVE-2025-9906 via keras (2.14.0)

keras PYPI version 2.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aigarmic =1.0.0, =0.40.4, =0.0.0, =0.30.5, =0.3.0, =0.1.0, =0.1.0, =3.0.2, =2.0.0, =1.0.0rc1, =0.0.7, =1.3.1 and more Source cves: CVE-2025-9906 Sour...

a62-emotion (>=0.9.2, <=0.10.10), acuitylite (>=6.27.0, <=6.36.0) +312 more potentially affected by CVE-2025-9906 via keras (2.15.0)

keras PYPI version 2.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - a62-emotion =0.9.2, =6.27.0, =0.0.1, =1.1.0, =0.20.0, =0.1.0, =0.9.8, =0.2.0, =0.0.2, =0.43.0 and more Source cves: CVE-2025-9906 Source advisory:...