CVE-2025-49655

creationtimestamp| type| source ---|---|--- 2025-10-20 03:25:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m3lum5rdyb23 2025-10-21 03:35:38+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3m3ofmebtpk27 2026-02-27 08:45:57+00:00| seen|...

DEBIAN-CVE-2025-49655

Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s system when loaded despite safe mode being...