2 matches found
CVE-2026-12484
Removed by vendor...
7.8CVSS7.1AI score0.00393EPSS
SaveExploits0
CVE-2026-12484: Deserialization of Untrusted Data
A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle data through the public keras.layers.TorchModuleWrapper.fromconfig method. This method invokes torch.load..., weightsonly=False without requiring an explicit unsafe opt-in, such ...
7.8CVSS7.7AI score0.00393EPSS
SaveExploits0References2
20