Lucene search
+L

6 matches found

OSV
OSV
•added 2026/08/07 2:41 a.m.•17 views

OESA-2026-3234 python-Keras security update

Keras is a high-level neural networks API for Python. Security Fixes: Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in keras/src/utils/fileutils.py. The functions filtersafetarinfos and filtersafezipinfos validate archive membe...

8.1CVSS6.7AI score0.00563EPSS
SaveExploits2References3
Circl
Circl
•added 2026/07/14 9:37 a.m.•27 views

CVE-2026-12482

creationtimestamp| type| source ---|---|--- 2026-07-14 09:37:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlvtibkts2t 2026-07-19 21:10:12+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqzovlwxzm23 2026-07-19 21:10:19+00:00| seen|...

6.5CVSS5.6AI score0.0033EPSS
SaveExploits1References3
vulnersOsv
vulnersOsv
•added 2026/07/14 6:43 a.m.•16 views

125softnlp (0.0.1), a2 (>=0.10.11, <=0.10.13) +4971 more potentially affected by CVE-2026-12482 via keras (>=1.2.1, <=3.15.1)

keras PYPI version =1.2.1, =0.10.11, =0.1.0, =0.0.0, =0.9.2, =0.5.0, =1.0.0, =0.0.1, =0.2.0, =0.6.0, =0.1.0, =0.1.0, =0.2.0 - academic-emotion 0.1.2 and more Source cves: CVE-2026-12482 Source advisory: SNYK:PYTHON-KERAS-17971535...

6.5CVSS5.6AI score0.0033EPSS
SaveExploits1
OSV
OSV
•added 2026/07/14 6:16 a.m.•16 views

UBUNTU-CVE-2026-12482

A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the filtersafetarinfos validation in keras/src/utils/fileutils.py. Specifically, symlink entries are not subjected to the same ispathindir validation as regular file entries,...

6.5CVSS5.7AI score0.0033EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/07/14 5:13 a.m.•13 views

CVE-2026-12482 Path Traversal via Symlink Name Validation Bypass in keras-team/keras

A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the filtersafetarinfos validation in keras/src/utils/fileutils.py. Specifically, symlink entries are not subjected to the same ispathindir validation as regular file entries,...

3.1CVSS5.7AI score0.0033EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2026/07/14 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-12482

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the filtersafetarinfos validation in...

6.5CVSS5.6AI score0.0033EPSS
SaveExploits1References2
Rows per page
Query Builder