https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:30:35.640610+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-255346 EUVD-2026-255346 2026-10-03T04:30:35.745110+00:00 EUVD-2026-255346 https://cve.radiocsirt.org/vuln/fkie_cve-2025-49655 fkie_cve-2025-49655 2026-10-03T04:30:35.745151+00:00

Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s system when loaded despite safe mode being enabled. The vulnerability can be triggered through both local and remote files.

 https://cve.radiocsirt.org/vuln/ghsa-cvhh-q5g5-qprp GHSA-cvhh-q5g5-qprp — Keras framework vulnerable to deserialization of untrusted data 2026-10-03T04:30:35.745186+00:00

Affected: PyPI: keras

Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s system when loaded despite safe mode being enabled. The vulnerability can be triggered through both local and remote files.

 https://cve.radiocsirt.org/vuln/pysec-2026-368 PYSEC-2026-368 — Keras framework vulnerable to deserialization of untrusted data 2026-10-03T04:30:35.745212+00:00

Affected: PyPI: keras

Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s system when loaded despite safe mode being enabled. The vulnerability can be triggered through both local and remote files.

 https://cve.radiocsirt.org/vuln/rhsa-2025:22068 RHSA-2025:22068 — Red Hat Security Advisory: RHTAS 1.3.1 - Tech Preview Release of Model Transparency 2026-10-03T04:30:35.745233+00:00

keras: Keras deserialization of untrusted data

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-49655 UBUNTU-CVE-2025-49655 2026-10-03T04:30:35.745250+00:00

Affected: Ubuntu:18.04:LTS: keras, Ubuntu:20.04:LTS: keras

Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s system when loaded despite safe mode being enabled. The vulnerability can be triggered through both local and remote files.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2673 WID-SEC-W-2025-2673 — Red Hat OpenShift (Trusted Artifact Signer): Schwachstelle ermöglicht Codeausführung 2026-10-03T04:30:35.745270+00:00

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat OpenShift ausnutzen, um beliebigen Programmcode auszuführen.