Keras framework vulnerable to deserialization of untrusted data

Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s system when loaded despite safe mode being...

Deserialization of Untrusted Data

Overview keras is a Keras is a high-level neural networks API for Python.. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the fromconfig method that uses Python’s pickle module as a fall back when weightsonly=False. An attacker can execute arbitrary code ...

PT-2025-42617

Name of the Vulnerable Software and Affected Versions Keras versions 3.11.0 through 3.11.2 Description The Keras framework is susceptible to a critical security issue stemming from unsafe deserialization of untrusted data. Specifically, when loading Keras files containing a maliciously crafted...

Security Bulletin: Multiple vulnerabilities reported in YAJSW service shipped in IBM WebSphere eXtreme Scale Liberty Deployment

Summary YAJSWYet Another Java Service Wrapper uses Apache Commons and Netty to manage services, launch and monitor application etc. WebSphere eXtreme Scale Liberty deployments, uses YAJSW to register services with the operating system. CVE-2025-27553, CVE-2025-30474 and CVE-2025-25193...

Malicious Package

Overview ad-react-wrapper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2019-0219

Malware in sbrugna...

EUVD-2020-5861

Malware in sbrugna...

EUVD-2020-0510

Malware in sbrugna...

EUVD-2014-8468

Malware in sbrugna...

EUVD-2012-4128

Malware in sbrugna...

EUVD-2001-0747

Malware in sbrugna...

EUVD-2021-1136

Malware in sbrugna...

EUVD-2009-0322

Malware in sbrugna...

EUVD-2019-0307

Malware in sbrugna...

EUVD-2012-0452

Malware in sbrugna...

EUVD-2021-19269

Malware in sbrugna...

EUVD-2013-0806

Malware in sbrugna...

EUVD-2017-16795

Malware in sbrugna...

EUVD-2012-1201

Malware in sbrugna...

EUVD-2018-0423

Malware in sbrugna...