gesture-classifying-model (>=0.1.2, <=0.1.3) potentially affected by CVE-2025-12058 via keras (1.2.2)

keras PYPI version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - gesture-classifying-model =0.1.2, =0.1.3 Source cves: CVE-2025-12058 Source advisory: OSV:PYSEC-2026-1487...

keras-video-generators-modified (0.2.0) potentially affected by CVE-2025-12058 via keras (2.5.0rc0)

keras PYPI version 2.5.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - keras-video-generators-modified 0.2.0 Source cves: CVE-2025-12058 Source advisory: OSV:PYSEC-2026-1487...

cryoet-deepfinder (0.2.1), cspot (>=1.0.4, <=1.0.16) +9 more potentially affected by CVE-2025-12058 via keras (2.14.0rc0)

keras PYPI version 2.14.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cryoet-deepfinder 0.2.1 - cspot =1.0.4, =2.1.0, =0.4.0, =2.13.0rc0, =2.13.0rc0, =2.13.0rc2 - tensorflow-text 2.12.0rc0 - tfrec-literate 2.10.0rc1...

auto-dl (0.1.1), azureml-contrib-brainwave (>=0.1.57, <=1.0.33) +8 more potentially affected by CVE-2025-12058 via keras (2.1.5)

keras PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - auto-dl 0.1.1 - azureml-contrib-brainwave =0.1.57, =1.0.0, =0.1.2, =0.2.0, =1.0.0, =2.0.4, =0.1.0, =0.1.1 Source cves: CVE-2025-12058 Source advisory:...

free (>=0.0.1, <=0.0.2), hdltex (1.0.4) +2 more potentially affected by CVE-2025-12058 via keras (2.0.9)

keras PYPI version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - free =0.0.1, =1.0.0, =1.0.1, =1.0.2 Source cves: CVE-2025-12058 Source advisory: OSV:PYSEC-2026-1487...

lkmeans (>=0.0.1, <=0.0.2) potentially affected by CVE-2025-12058 via keras (2.13.1rc0)

keras PYPI version 2.13.1rc0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - lkmeans =0.0.1, =0.0.2 Source cves: CVE-2025-12058 Source advisory: OSV:PYSEC-2026-1487...

aadhaar-detection (0.5.0), accuinsight (>=1.0.84, <=1.0.87) +178 more potentially affected by CVE-2025-12058 via keras (2.8.0rc1)

keras PYPI version 2.8.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aadhaar-detection 0.5.0 - accuinsight =1.0.84, =0.1.11, =0.1.11, =0.6.3, =0.0.6, =0.0.1, =1.1.2, =1.1.17 and more Source cves: CVE-2025-12058 Sourc...

keras-explain (0.0.1), scikit-keras (0.1.11) +3 more potentially affected by CVE-2025-12058 via keras (2.1.6)

keras PYPI version 2.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - keras-explain 0.0.1 - scikit-keras 0.1.11 - tensorflowjs =0.5.4, =0.5.2, =0.5.5 - tutti-aisthetics 0.0.3 Source cves: CVE-2025-12058 Source advisory:...

ax-env (>=0.2.6, <=0.2.7), cbc (>=1.0.0, <=1.1.0) +18 more potentially affected by CVE-2025-12058 via keras (2.9.0)

keras PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - ax-env =0.2.6, =1.0.0, =0.3.0, =0.1.8, =1.0.0, =1.0.12, =0.6.1, =1.0.0, =0.1.7, =1.0.8rc18, =1.0.8rc19 and more Source cves: CVE-2025-12058 Source...

keras-utilities (>=0.1.7, <=0.1.27) potentially affected by CVE-2025-12058 via keras (1.2.1)

keras PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - keras-utilities =0.1.7, =0.1.27 Source cves: CVE-2025-12058 Source advisory: OSV:PYSEC-2026-1487...

aiqc (>=3.0.22, <=7.1.5), amdnet (>=1.0.0, <=1.0.2) +8 more potentially affected by CVE-2025-12058 via keras (2.7.0)

keras PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aiqc =3.0.22, =1.0.0, =0.1.11, =2.7.0.0, =0.12.5, =0.0.0, =0.0.96, =0.3.8 Source cves: CVE-2025-12058 Source advisory: OSV:PYSEC-2026-1487...

animl (>=1.1.2, <=1.1.4), annopro (>=0.1.0rc1, <=0.2.0) +65 more potentially affected by CVE-2025-12058 via keras (2.6.0)

keras PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - animl =1.1.2, =0.1.0rc1, =0.47.0, =1.0.1, =0.0.9, =0.0.3, =2.2.0, =2.4.1, =1.0.0rc1, =4.5.2, =0.48.1, =1.1.3, =0.2.4, =0.2.10 and more Source cves:...

keras-eval (>=0.0.4, <=0.0.8), keras-model-specs (>=0.0.17, <=0.0.24) +3 more potentially affected by CVE-2025-12058 via keras (2.1.4)

keras PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - keras-eval =0.0.4, =0.0.17, =0.0.21, =0.1.2, =0.5.2 Source cves: CVE-2025-12058 Source advisory: OSV:PYSEC-2026-1487...

OESA-2025-2691 python-Keras security update

Keras is a high-level neural networks API for Python. Security Fixes: The Keras.Model.loadmodel method, including when executed with the intended security mitigation safemode=True, is vulnerable to arbitrary local file loading and Server-Side Request Forgery SSRF. This vulnerability stems from th...

OESA-2025-2690 python-Keras security update

Keras is a high-level neural networks API for Python. Security Fixes: The Keras.Model.loadmodel method, including when executed with the intended security mitigation safemode=True, is vulnerable to arbitrary local file loading and Server-Side Request Forgery SSRF. This vulnerability stems from th...

CVE-2025-12058

The Keras.Model.loadmodel method, including when executed with the intended security mitigation safemode=True, is vulnerable to arbitrary local file loading and Server-Side Request Forgery SSRF. This vulnerability stems from the way the StringLookup layer is handled during model loading from a...

adpred (>=1.1.2, <=1.2.7), aeronet (>=0.0.8, <=0.0.18) +57 more potentially affected by CVE-2025-12058 via keras (2.2.4)

keras PYPI version 2.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adpred =1.1.2, =0.0.8, =0.2.7, =0.0.1, =0.2.0rc0, =0.0.1, =0.1.3, =0.2.3, =1.1.0, =0.1.0, =0.0.4, =0.65.0, =0.66.0 and more Source cves: CVE-2025-1205...

aiqc (>=3.0.22, <=7.1.5), amdnet (>=1.0.0, <=1.0.2) +8 more potentially affected by CVE-2025-12058 via keras (2.7.0)

keras PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aiqc =3.0.22, =1.0.0, =0.1.11, =2.7.0.0, =0.12.5, =0.0.0, =0.0.96, =0.3.8 Source cves: CVE-2025-12058 Source advisory: OSV:GHSA-MQ84-HJQX-CWF2...

adversarial-friend (1.1.8), agrothon (>=1.1.5, <=1.3.2) +43 more potentially affected by CVE-2025-12058 via keras (2.4.3)

keras PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adversarial-friend 1.1.8 - agrothon =1.1.5, =2.1.0, =0.0.6, =0.1.2.dev0, =0.1.0, =0.0.1.dev0, =0.0.6, =0.0.2, =0.1.3, =0.7.0, =1.4.0 and more Source...

aggmap (>=1.1.1, <=1.2.1), ai-music-remixer (3.0.0) +112 more potentially affected by CVE-2025-12058 via keras (2.10.0rc1)

keras PYPI version 2.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aggmap =1.1.1, =0.0.157, =0.1.18, =0.1.11, =0.30.0, =0.0.13, =0.1.0, =0.1.1, =0.1.9 - automea 0.0.13 - avici 1.0.5 - basic-pitch 0.2.3 and more...