CVE-2026-109155

A path traversal vulnerability exists in DeepPavlov versions up to 1.7.0 . The flaw resides in the untar function within the Model Download Handler component. This vulnerability allows for remote execution of a path traversal attack. While the issue was reported via a project issue report, the pr...

deeppavlov (>=0.0.6b0, <=0.4.0) potentially affected by CVE-2026-9335 via keras (2.2.0)

keras PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - deeppavlov =0.0.6b0, =0.4.0 Source cves: CVE-2026-9335 Source advisory: OSV:GHSA-M8WH-29WM-52MV...

cde (>=0.1.0, <=0.2.0.1), deeppavlov (>=0.0.5.1, <=0.0.5.3) potentially affected by CVE-2026-9335 via keras (2.1.2)

keras PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cde =0.1.0, =0.0.5.1, =0.0.5.3 Source cves: CVE-2026-9335 Source advisory: OSV:GHSA-M8WH-29WM-52MV...