keras-utilities (>=0.1.7, <=0.1.27) potentially affected by CVE-2026-9335 via keras (1.2.1)

keras PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - keras-utilities =0.1.7, =0.1.27 Source cves: CVE-2026-9335 Source advisory: OSV:GHSA-M8WH-29WM-52MV...

Keras 安全漏洞

Keras is a multi-backend deep learning framework open-sourced by Keras. A security vulnerability exists in Keras that stems from the keras.utils.getfile API not using the filter=data function when processing tarballs, which could lead to path traversal attacks...