auto-dl (0.1.1), azureml-contrib-brainwave (>=0.1.57, <=1.0.33) +8 more potentially affected by CVE-2026-12480 via keras (2.1.5)

keras PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - auto-dl 0.1.1 - azureml-contrib-brainwave =0.1.57, =1.0.0, =0.1.2, =0.2.0, =1.0.0, =2.0.4, =0.1.0, =0.1.1 Source cves: CVE-2026-12480 Source advisory:...

a62-emotion (>=0.9.2, <=0.10.10), acuitylite (>=6.27.0, <=6.36.0) +311 more potentially affected by CVE-2026-12480 via keras (2.15.0)

keras PYPI version 2.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - a62-emotion =0.9.2, =6.27.0, =0.0.1, =1.1.0, =0.20.0, =0.1.0, =0.9.8, =0.2.0, =0.0.2, =0.43.0 and more Source cves: CVE-2026-12480 Source advisory:...

adversarial-friend (1.1.8), agrothon (>=1.1.5, <=1.3.2) +43 more potentially affected by CVE-2026-12480 via keras (2.4.3)

keras PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adversarial-friend 1.1.8 - agrothon =1.1.5, =2.1.0, =0.0.6, =0.1.2.dev0, =0.1.0, =0.0.1.dev0, =0.0.6, =0.0.2, =0.1.3, =0.7.0, =1.4.0 and more Source...

a2grunnerp (>=0.1.0, <=0.1.8), academic-emotion (0.1.2) +113 more potentially affected by CVE-2026-12480 via keras (2.10.0)

keras PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - a2grunnerp =0.1.0, =0.1.1b2, =1.0.0, =0.0.2, =0.1.0, =7.2.0, =0.1.3, =0.1.8 and more Source cves: CVE-2026-12480 Source advisory: OSV:PYSEC-2026-3629...

aigarmic (>=1.0.0, <=1.0.1), albedo (0.1.0) +130 more potentially affected by CVE-2026-12480 via keras (2.14.0)

keras PYPI version 2.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aigarmic =1.0.0, =0.40.4, =0.0.0, =0.30.5, =0.3.0, =0.1.0, =0.1.0, =3.0.2, =2.0.0, =1.0.0rc1, =0.0.7, =1.3.1 and more Source cves: CVE-2026-12480...

armcor (0.2.0), deepdirect (0.1.6) +1 more potentially affected by CVE-2026-12480 via keras (2.4.0)

keras PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - armcor 0.2.0 - deepdirect 0.1.6 - ucbshift =0.1.0, =0.2.0 Source cves: CVE-2026-12480 Source advisory: OSV:PYSEC-2026-3629...

gesture-classifying-model (>=0.1.2, <=0.1.3) potentially affected by CVE-2026-12480 via keras (1.2.2)

keras PYPI version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - gesture-classifying-model =0.1.2, =0.1.3 Source cves: CVE-2026-12480 Source advisory: OSV:GHSA-26C4-7VV6-867J...

adpred (>=1.1.2, <=1.2.7), aeronet (>=0.0.8, <=0.0.18) +57 more potentially affected by CVE-2026-12480 via keras (2.2.4)

keras PYPI version 2.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adpred =1.1.2, =0.0.8, =0.2.7, =0.0.1, =0.2.0rc0, =0.0.1, =0.1.3, =0.2.3, =1.1.0, =0.1.0, =0.0.4, =0.65.0, =0.66.0 and more Source cves: CVE-2026-1248...

cosmopower (0.2.0), guardrail-ml (>=0.0.14, <=0.0.15) +7 more potentially affected by CVE-2026-12480 via keras (2.15.0rc1)

keras PYPI version 2.15.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cosmopower 0.2.0 - guardrail-ml =0.0.14, =0.5.10, =0.1.0, =2.14.0rc0, =2.14.0rc0, =2.14.0rc1 - tensorflow-text 2.13.0rc0 - tf-extensions 0.1.0...

ads-and (>=0.1.0, <=0.1.3), ads-bib (>=0.1.0, <=0.3.3) +12 more potentially affected by CVE-2026-12480 via keras (>=3.13.0, <=3.14.1)

keras PYPI version =3.13.0, =0.1.0, =0.1.0, =0.0.1, =0.3.4, =0.2.5, =0.1.0, =0.0.1, =1.3.1, =0.2.6, =1.24.0, =1.25.0 Source cves: CVE-2026-12480 Source advisory: GHSA-26C4-7VV6-867J...

acetone-nnet (>=0.1.0.dev2, <=0.4.0.dev1), aihandler (>=1.8.15, <=1.19.0) +117 more potentially affected by CVE-2026-12480 via keras (2.12.0)

keras PYPI version 2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - acetone-nnet =0.1.0.dev2, =1.8.15, =1.8.17, =0.1.18, =1.8.14, =1.1.0, =0.2.2.dev0, =1.3.0, =0.10.0, =0.2.0, =1.0.0, =1.0.1 - beyondml 0.1.5 and more...

adpred (1.3.2), africanwhisper (>=0.2.3, <=0.9.0) +83 more potentially affected by CVE-2026-12480 via keras (>=3.0.0, <=3.12.1)

keras PYPI version =3.0.0, =0.2.3, =0.1.2, =0.1.0, =1.3.0.dev4, =1.1.8, =1.3.3, =0.1.1, =0.1.0, =0.2.3 and more Source cves: CVE-2026-12480 Source advisory: OSV:GHSA-26C4-7VV6-867J...

UBUNTU-CVE-2026-12480

Keras versions up to and including 3.13.2 are vulnerable to an arbitrary HDF5 file read due to an incomplete fix for CVE-2026-1669. The vulnerability resides in the H5IOStore.verifydataset and fileeditor.py methods, which fail to check the dataset.isvirtual property of HDF5 datasets. This allows ...

ads-and (>=0.1.0, <=0.1.3), ads-bib (>=0.1.0, <=0.3.3) +12 more potentially affected by CVE-2026-12480 via keras (>=3.13.0, <=3.14.1)

keras PYPI version =3.13.0, =0.1.0, =0.1.0, =0.0.1, =0.3.4, =0.2.5, =0.1.0, =0.0.1, =1.3.1, =0.2.6, =1.24.0, =1.25.0 Source cves: CVE-2026-12480 Source advisory: MEND:CVE-2026-12480...