Lucene search
+L

497 matches found

CVE
CVE
added 2025/10/30 5:10 p.m.114 views

CVE-2025-12060

CVE-2025-12060 concerns Keras: when using keras.utils.get_file with extract=True on tar archives, tarfile.extractall is invoked without a proper filter, enabling path traversal and potential arbitrary file writes outside the destination directory. The root cause is linked to Python tarfile weakne...

8.9CVSS6.8AI score0.00589EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/30 5:10 p.m.11 views

CVE-2025-12060 Keras keras.utils.get_file Utility Path Traversal Vulnerability

The keras.utils.getfile API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal attack. The utility uses Python's tarfile.extractall function without the filter="data" feature. A remote attacker can craft a malicious tar archive containing special...

8.9CVSS6.8AI score0.00589EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/30 5:10 p.m.31 views

CVE-2025-12060 Keras keras.utils.get_file Utility Path Traversal Vulnerability

The keras.utils.getfile API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal attack. The utility uses Python's tarfile.extractall function without the filter="data" feature. A remote attacker can craft a malicious tar archive containing special...

8.9CVSS0.00589EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/30 5:10 p.m.11 views

CVE-2025-12060 Keras keras.utils.get_file Utility Path Traversal Vulnerability

The keras.utils.getfile API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal attack. The utility uses Python's tarfile.extractall function without the filter="data" feature. A remote attacker can craft a malicious tar archive containing special...

8.9CVSS7.4AI score
SaveExploits0References5
Debian CVE
Debian CVE
added 2025/10/30 5:10 p.m.13 views

CVE-2025-12060

Removed by vendor...

8.9CVSS6.3AI score0.00589EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/10/30 12:00 a.m.9 views

Keras 安全漏洞

Keras is a multi-backend deep learning framework open-sourced by Keras. A security vulnerability exists in Keras that stems from the keras.utils.getfile API not using the filter=data function when processing tarballs, which could lead to path traversal attacks...

8.9CVSS6.3AI score0.00589EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/30 12:00 a.m.9 views

PT-2025-44433

Name of the Vulnerable Software and Affected Versions Keras affected versions not specified Description The keras.utils.get file API in Keras is susceptible to a path traversal issue when the extract=True option is used with tar archives. The utility employs Python’s tarfile.extractall function...

9.8CVSS6.5AI score0.00589EPSS
SaveExploits0References23
Tenable Nessus
Tenable Nessus
added 2025/10/30 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-12060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The keras.utils.getfile API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal attack. The utility uses Python...

9.4CVSS6.5AI score0.0143EPSS
SaveExploits11References2
Snyk
Snyk
added 2025/10/29 9:44 a.m.10 views

Deserialization of Untrusted Data

Overview keras is a Keras is a high-level neural networks API for Python.. Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the .keras archives when they are initialized with a path to a vocabulary file. The model deserialization process when loading the...

6.8CVSS6.9AI score0.00247EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/29 9:30 a.m.23 views

GHSA-MQ84-HJQX-CWF2 Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery

The Keras.Model.loadmodel method, including when executed with the intended security mitigation safemode=True, is vulnerable to arbitrary local file loading and Server-Side Request Forgery SSRF. This vulnerability stems from the way the StringLookup layer is handled during model loading from a...

5.9CVSS6.6AI score0.00247EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/29 9:30 a.m.84 views

EUVD-2025-36634

Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery...

5.9CVSS6.3AI score0.00247EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2025/10/29 9:30 a.m.15 views

Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery

The Keras.Model.loadmodel method, including when executed with the intended security mitigation safemode=True, is vulnerable to arbitrary local file loading and Server-Side Request Forgery SSRF. This vulnerability stems from the way the StringLookup layer is handled during model loading from a...

5.9CVSS6.6AI score0.00247EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2025/10/29 9:15 a.m.10 views

CVE-2025-12058

The Keras.Model.loadmodel method, including when executed with the intended security mitigation safemode=True, is vulnerable to arbitrary local file loading and Server-Side Request Forgery SSRF. This vulnerability stems from the way the StringLookup layer is handled during model loading from a...

5.9CVSS0.00247EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/29 9:15 a.m.16 views

AZL-69583 CVE-2025-12058 affecting package keras 2.11.0-3

The Keras.Model.loadmodel method, including when executed with the intended security mitigation safemode=True, is vulnerable to arbitrary local file loading and Server-Side Request Forgery SSRF. This vulnerability stems from the way the StringLookup layer is handled during model loading from a...

5.9CVSS5.9AI score0.00247EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/29 9:15 a.m.14 views

AZL-69021 CVE-2025-12058 affecting package keras 3.3.3-6

The Keras.Model.loadmodel method, including when executed with the intended security mitigation safemode=True, is vulnerable to arbitrary local file loading and Server-Side Request Forgery SSRF. This vulnerability stems from the way the StringLookup layer is handled during model loading from a...

5.9CVSS5.9AI score0.00247EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/29 9:15 a.m.15 views

UBUNTU-CVE-2025-12058

The Keras.Model.loadmodel method, including when executed with the intended security mitigation safemode=True, is vulnerable to arbitrary local file loading and Server-Side Request Forgery SSRF. This vulnerability stems from the way the StringLookup layer is handled during model loading from a...

5.9CVSS7.4AI score0.00247EPSS
SaveExploits0References4
CVE
CVE
added 2025/10/29 8:48 a.m.57 views

CVE-2025-12058

The CVE describes a vulnerability in Keras Model.load_model where the StringLookup layer can load a local file or fetch remote content during model loading, enabling arbitrary local file reads and SSRF even when safe_mode=True. IBM bulletins link affected packages (keras-3.11.3 wheel; keras-2.14....

5.9CVSS6.2AI score0.00247EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/29 8:48 a.m.4 views

CVE-2025-12058 Vulnerability in Keras Model.load_model Leading to Arbitrary Local File Loading and SSRF

The Keras.Model.loadmodel method, including when executed with the intended security mitigation safemode=True, is vulnerable to arbitrary local file loading and Server-Side Request Forgery SSRF. This vulnerability stems from the way the StringLookup layer is handled during model loading from a...

5.9CVSS6.2AI score0.00247EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2025/10/29 8:48 a.m.13 views

CVE-2025-12058

Removed by vendor...

5.9CVSS7.2AI score0.00247EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/10/29 8:48 a.m.325 views

CVE-2025-12058 Vulnerability in Keras Model.load_model Leading to Arbitrary Local File Loading and SSRF

The Keras.Model.loadmodel method, including when executed with the intended security mitigation safemode=True, is vulnerable to arbitrary local file loading and Server-Side Request Forgery SSRF. This vulnerability stems from the way the StringLookup layer is handled during model loading from a...

5.9CVSS0.00247EPSS
SaveExploits0References2
Rows per page
Query Builder