CVE-2026-12484

creationtimestamp| type| source ---|---|--- 2026-07-19 21:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqzoeigsm42w 2026-07-19 21:55:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqzrhgdo6n27 2026-07-19 22:00:39+00:00| seen|...

CVE-2026-12484

A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle data through the public keras.layers.TorchModuleWrapper.fromconfig method. This method invokes torch.load..., weightsonly=False without requiring an explicit unsafe opt-in, such ...

CVE-2026-12484

The CVE-2026-12484 entry describes a vulnerability in keras-team/keras v3.15.0 where unsafe deserialization of attacker-controlled PyTorch pickle data is possible via keras.layers.TorchModuleWrapper.from_config. The public method calls torch.load(..., weights_only=False) without an explicit safe ...