ax-env (>=0.2.6, <=0.2.7), cbc (>=1.0.0, <=1.1.0) +19 more potentially affected by CVE-2026-12482 via keras (2.9.0)

keras PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - ax-env =0.2.6, =1.0.0, =0.3.0, =0.1.8, =1.0.0, =1.0.12, =0.6.1, =1.0.0, =0.1.7, =1.0.8rc18, =1.0.8rc19 and more Source cves: CVE-2026-12482 Source...

axcorsrmri (0.0.1), behavython (>=0.7.0, <=0.9.8) +8 more potentially affected by CVE-2026-12482 via keras (2.12.0rc1)

keras PYPI version 2.12.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - axcorsrmri 0.0.1 - behavython =0.7.0, =0.3.21, =0.1.5, =0.29.0, =2.11.0rc1, =2.11.0rc1, =2.11.0rc1, =2.11.0rc2 - tensorflow-text 2.10.0rc0 Source...

keras-video-generators-modified (0.2.0) potentially affected by CVE-2026-12482 via keras (2.5.0rc0)

keras PYPI version 2.5.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - keras-video-generators-modified 0.2.0 Source cves: CVE-2026-12482 Source advisory: OSV:PYSEC-2026-3630...

aiqc (>=3.0.22, <=7.1.5), amdnet (>=1.0.0, <=1.0.2) +8 more potentially affected by CVE-2026-12482 via keras (2.7.0)

keras PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aiqc =3.0.22, =1.0.0, =0.1.11, =2.7.0.0, =0.12.5, =0.0.0, =0.0.96, =0.3.8 Source cves: CVE-2026-12482 Source advisory: OSV:PYSEC-2026-3630...

armcor (0.2.0), deepdirect (0.1.6) +1 more potentially affected by CVE-2026-12482 via keras (2.4.0)

keras PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - armcor 0.2.0 - deepdirect 0.1.6 - ucbshift =0.1.0, =0.2.0 Source cves: CVE-2026-12482 Source advisory: OSV:PYSEC-2026-3630...

a62-emotion (>=0.9.2, <=0.10.10), acuitylite (>=6.27.0, <=6.36.0) +315 more potentially affected by CVE-2026-12482 via keras (2.15.0)

keras PYPI version 2.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - a62-emotion =0.9.2, =6.27.0, =0.0.1, =1.1.0, =0.20.0, =0.1.0, =0.9.8, =0.2.0, =0.5.0 - apalysis 0.0.2 - arctic-charr-matcher 0.1.4 and more Source...

diluvian (>=0.0.2, <=0.0.3), pyfiction (0.1.3) +2 more potentially affected by CVE-2026-12482 via keras (2.0.4)

keras PYPI version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - diluvian =0.0.2, =0.0.3 - pyfiction 0.1.3 - rldqn 0.0.5 - russtress 0.1.0 Source cves: CVE-2026-12482 Source advisory: OSV:PYSEC-2026-3630...

animl (>=1.1.2, <=1.1.4), annopro (>=0.1.0rc1, <=0.2.0) +64 more potentially affected by CVE-2026-12482 via keras (2.6.0)

keras PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - animl =1.1.2, =0.1.0rc1, =0.47.0, =1.0.1, =0.0.3, =2.2.0, =2.4.1, =1.0.0rc1, =4.5.2, =0.48.1, =1.1.3, =0.2.4, =0.0.1, =0.0.2 and more Source cves:...

aadhaar-detection (0.5.0), accuinsight (>=1.0.84, <=1.0.87) +178 more potentially affected by CVE-2026-12482 via keras (2.8.0rc1)

keras PYPI version 2.8.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aadhaar-detection 0.5.0 - accuinsight =1.0.84, =0.1.11, =0.1.11, =0.6.3, =0.0.6, =0.0.1, =1.1.2, =1.1.17 and more Source cves: CVE-2026-12482 Sourc...

ads-and (>=0.1.0, <=0.1.3), ads-bib (>=0.1.0, <=0.3.3) +12 more potentially affected by CVE-2026-12482 via keras (>=3.13.0, <=3.14.1)

keras PYPI version =3.13.0, =0.1.0, =0.1.0, =0.0.1, =0.3.4, =0.2.5, =0.1.0, =0.0.1, =1.3.1, =0.2.6, =1.24.0, =1.25.0 Source cves: CVE-2026-12482 Source advisory: OSV:PYSEC-2026-3630...

auto-dl (0.1.1), azureml-contrib-brainwave (>=0.1.57, <=1.0.33) +8 more potentially affected by CVE-2026-12482 via keras (2.1.5)

keras PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - auto-dl 0.1.1 - azureml-contrib-brainwave =0.1.57, =1.0.0, =0.1.2, =0.2.0, =1.0.0, =2.0.4, =0.1.0, =0.1.1 Source cves: CVE-2026-12482 Source advisory:...

a62-emotion (>=0.10.11, <=0.11.4), adcl (>=0.1.2, <=0.1.4) +158 more potentially affected by CVE-2026-12482 via keras (2.11.0)

keras PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - a62-emotion =0.10.11, =0.1.2, =1.3.0, =1.2.36, =1.0.3, =0.3.1, =0.0.3, =0.2.4, =2.0.0, =0.1.10, =0.0.0, =0.3.1 - brainglobe-workflows 1.0.0 and more...

acetone-nnet (>=0.1.0.dev2, <=0.4.0.dev1), aihandler (>=1.8.15, <=1.19.0) +117 more potentially affected by CVE-2026-12482 via keras (2.12.0)

keras PYPI version 2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - acetone-nnet =0.1.0.dev2, =1.8.15, =1.8.17, =0.1.18, =1.8.14, =1.1.0, =0.2.2.dev0, =1.3.0, =0.10.0, =0.2.0, =1.0.0, =1.0.1 - beyondml 0.1.5 and more...

adversarial-attacks-white-black-box (0.1.7), aimlops-sentiment-model (0.0.1) +90 more potentially affected by CVE-2026-12482 via keras (2.13.1)

keras PYPI version 2.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adversarial-attacks-white-black-box 0.1.7 - aimlops-sentiment-model 0.0.1 - aisquared =0.3.0, =0.0.14, =0.0.2, =0.1.3, =0.1.6, =0.0.1, =0.0.0, =0.0.4...

face-compare (>=1.0.1, <=1.0.2), pyhand-earth (>=0.0.11, <=1.1.0) potentially affected by CVE-2026-12482 via keras (2.4.2)

keras PYPI version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - face-compare =1.0.1, =0.0.11, =1.1.0 Source cves: CVE-2026-12482 Source advisory: OSV:PYSEC-2026-3630...

adversarial-friend (1.1.8), agrothon (>=1.1.5, <=1.3.2) +43 more potentially affected by CVE-2026-12482 via keras (2.4.3)

keras PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adversarial-friend 1.1.8 - agrothon =1.1.5, =2.1.0, =0.0.6, =0.1.2.dev0, =0.1.0, =0.0.1.dev0, =0.0.6, =0.0.2, =0.1.3, =0.7.0, =1.4.0 and more Source...

autotsf (>=0.0.5, <=0.0.8), carla-recourse (>=0.0.4, <=0.0.5) +15 more potentially affected by CVE-2026-12482 via keras (2.3.0)

keras PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - autotsf =0.0.5, =0.0.4, =1.0.0, =0.0.1, =0.4.2rc0, =0.4.1, =0.2.4, =0.6.4, =0.6.7 and more Source cves: CVE-2026-12482 Source advisory:...

amber-automl (>=0.1.0, <=0.1.2), axelerate (>=0.5.2, <=0.5.6) +32 more potentially affected by CVE-2026-12482 via keras (2.2.5)

keras PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - amber-automl =0.1.0, =0.5.2, =0.2.6, =0.0.1, =0.1.13, =0.2.0, =0.0.3, =0.16.3, =0.9.6, =1.2.0, =0.0.1, =0.0.10 - monk-cpu 0.0.1 and more Source cves:...

OESA-2026-3234 python-Keras security update

Keras is a high-level neural networks API for Python. Security Fixes: Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in keras/src/utils/fileutils.py. The functions filtersafetarinfos and filtersafezipinfos validate archive membe...

CVE-2026-12482

creationtimestamp| type| source ---|---|--- 2026-07-14 09:37:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlvtibkts2t 2026-07-19 21:10:12+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqzovlwxzm23 2026-07-19 21:10:19+00:00| seen|...