CVE-2026-12484

A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle data through the public keras.layers.TorchModuleWrapper.fromconfig method. This method invokes torch.load..., weightsonly=False without requiring an explicit unsafe opt-in, such ...

PT-2026-61515

Name of the Vulnerable Software and Affected Versions keras-team/keras version 3.15.0 Description Unsafe deserialization of attacker-controlled PyTorch pickle data occurs through the public keras.layers.TorchModuleWrapper.from config method. This happens because the method invokes torch.load...,...