keras-utilities (>=0.1.7, <=0.1.27) potentially affected by CVE-2024-3660 via keras (1.2.1)

keras PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - keras-utilities =0.1.7, =0.1.27 Source cves: CVE-2024-3660 Source advisory: OSV:PYSEC-2026-369...

a2grunnerp (>=0.1.0, <=0.1.8), a62-emotion (>=0.10.11, <=0.11.4) +930 more potentially affected by CVE-2024-3660 via keras (>=2.0.0, <=2.12.0)

keras PYPI version =2.0.0, =0.1.0, =0.10.11, =1.0.1, =0.1.0.dev2, =6.6.0, =0.1.2, =1.1.2, =0.0.8, =1.1.1, =1.2.1 and more Source cves: CVE-2024-3660 Source advisory: OSV:PYSEC-2026-369...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to keras-2.12.0-py2.py3-none-any.whl CVE-2024-3660

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to keras-2.12.0-py2.py3-none-any.whl CVE-2024-3660. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-3660 DESCRIPTION: TensorFlow Keras could allow a remote attack...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to an arbitrary code execution in TensorFlow Keras [CVE-2024-3660]

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to an arbitrary code execution in TensorFlow Keras, caused by a code injection flaw CVE-2024-3660. TensorFlow Keras is used by our Speech Service runtimes. This vulnerabilitiy has been addressed. Please read the...

CVE-2024-3660

creationtimestamp| type| source ---|---|--- 2025-01-27 19:23:25+00:00| seen| https://t.me/itsecnews/5233 2025-06-23 15:12:03+00:00| seen| https://gist.github.com/Reelix/27bb37322d89058d8da4751207a95f2c 2025-08-06 01:04:20+00:00| seen| MISP/853ff921-86fb-463b-bc2a-2860bf336b81 2025-08-16...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to an arbitrary code execution in TensorFlow Keras [CVE-2024-3660]

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to an arbitrary code execution in TensorFlow Keras, caused by a code injection flaw CVE-2024-3660. TensorFlow Keras is used by our Speech Service runtimes. This vulnerabilitiy has been addressed. Please read the...

a2grunnerp (>=0.1.0, <=0.1.8), a62-emotion (>=0.10.11, <=0.11.4) +930 more potentially affected by CVE-2024-3660 via keras (>=2.0.0, <=2.12.0)

keras PYPI version =2.0.0, =0.1.0, =0.10.11, =1.0.1, =0.1.0.dev2, =6.6.0, =0.1.2, =1.1.2, =0.0.8, =1.1.1, =1.2.1 and more Source cves: CVE-2024-3660 Source advisory: GHSA-X4WF-678H-2PMQ...

a2grunnerp (>=0.1.0, <=0.1.8), a62-emotion (>=0.10.11, <=0.11.4) +930 more potentially affected by CVE-2024-3660 via keras (>=2.0.0, <=2.12.0)

keras PYPI version =2.0.0, =0.1.0, =0.10.11, =1.0.1, =0.1.0.dev2, =6.6.0, =0.1.2, =1.1.2, =0.0.8, =1.1.1, =1.2.1 and more Source cves: CVE-2024-3660 Source advisory: OSV:GHSA-X4WF-678H-2PMQ...

keras-utilities (>=0.1.7, <=0.1.27) potentially affected by CVE-2024-3660 via keras (1.2.1)

keras PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - keras-utilities =0.1.7, =0.1.27 Source cves: CVE-2024-3660 Source advisory: OSV:GHSA-X4WF-678H-2PMQ...

gesture-classifying-model (>=0.1.2, <=0.1.3) potentially affected by CVE-2024-3660 via keras (1.2.2)

keras PYPI version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - gesture-classifying-model =0.1.2, =0.1.3 Source cves: CVE-2024-3660 Source advisory: OSV:GHSA-X4WF-678H-2PMQ...

CVE-2024-3660 Arbitrary code injection vulnerability in Keras framework < 2.13

A arbitrary code injection vulnerability in TensorFlow's Keras framework 2.13 allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective of the application...

a2grunnerp (>=0.1.0, <=0.1.8), a62-emotion (>=0.10.11, <=0.11.4) +932 more potentially affected by CVE-2024-3660 via keras (>=1.2.1, <=2.12.0)

keras PYPI version =1.2.1, =0.1.0, =0.10.11, =1.0.1, =0.1.0.dev2, =6.6.0, =0.1.2, =1.1.2, =0.0.8, =1.1.1, =1.2.1 and more Source cves: CVE-2024-3660 Source advisory: MEND:CVE-2024-3660...

CVE-2024-3660 Arbitrary code injection vulnerability in Keras framework < 2.13

A arbitrary code injection vulnerability in TensorFlow's Keras framework 2.13 allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective of the application...