https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:39:34.593431+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0873 certfr-2026-avi-0873 — De multiples vulnérabilités ont été découvertes dans Microsoft Azure Linux. Elles permettent à un attaquant de provoque… 2026-10-02T13:39:34.597573+00:00 certfr-2026-avi-0873 https://cve.radiocsirt.org/vuln/euvd-2026-331942 EUVD-2026-331942 2026-10-02T13:39:34.597612+00:00 EUVD-2026-331942 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12480 fkie_cve-2026-12480 2026-10-02T13:39:34.597627+00:00

Keras versions up to and including 3.13.2 are vulnerable to an arbitrary HDF5 file read due to an incomplete fix for CVE-2026-1669. The vulnerability resides in the `H5IOStore._verify_dataset()` and `file_editor.py` methods, which fail to check the `dataset.is_virtual` property of HDF5 datasets. This allows an attacker to craft a malicious `.keras` model archive or `.h5` weights file containing a Virtual Dataset (VDS) that references external HDF5 files on the victim's filesystem. When the victim loads the model using `keras.models.load_model()` or `keras.saving.load_model()`, the external file is transparently read, leading to potential information disclosure. Fixed in versions 3.12.2 and 3.14.1.

 https://cve.radiocsirt.org/vuln/ghsa-26c4-7vv6-867j GHSA-26c4-7vv6-867j — Keras: HDF5 virtual datasets can disclose local files 2026-10-02T13:39:34.597661+00:00

Affected: PyPI: keras

Keras versions up to and including 3.13.2 are vulnerable to an arbitrary HDF5 file read due to an incomplete fix for CVE-2026-1669. The vulnerability resides in the `H5IOStore._verify_dataset()` and `file_editor.py` methods, which fail to check the `dataset.is_virtual` property of HDF5 datasets. This allows an attacker to craft a malicious `.keras` model archive or `.h5` weights file containing a Virtual Dataset (VDS) that references external HDF5 files on the victim's filesystem. When the victim loads the model using `keras.models.load_model()` or `keras.saving.load_model()`, the external file is transparently read, leading to potential information disclosure. Fixed in versions 3.12.3 and 3.15.0.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-12480 msrc_CVE-2026-12480 — Arbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/keras 2026-10-02T13:39:34.597689+00:00 msrc_CVE-2026-12480 https://cve.radiocsirt.org/vuln/pysec-2026-3629 PYSEC-2026-3629 — Keras: HDF5 virtual datasets can disclose local files 2026-10-02T13:39:34.597705+00:00

Affected: PyPI: keras

Keras versions up to and including 3.13.2 are vulnerable to an arbitrary HDF5 file read due to an incomplete fix for CVE-2026-1669. The vulnerability resides in the `H5IOStore._verify_dataset()` and `file_editor.py` methods, which fail to check the `dataset.is_virtual` property of HDF5 datasets. This allows an attacker to craft a malicious `.keras` model archive or `.h5` weights file containing a Virtual Dataset (VDS) that references external HDF5 files on the victim's filesystem. When the victim loads the model using `keras.models.load_model()` or `keras.saving.load_model()`, the external file is transparently read, leading to potential information disclosure. Fixed in versions 3.12.3 and 3.15.0.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-12480 UBUNTU-CVE-2026-12480 2026-10-02T13:39:34.597728+00:00

Affected: Ubuntu:18.04:LTS: keras, Ubuntu:20.04:LTS: keras

Keras versions up to and including 3.13.2 are vulnerable to an arbitrary HDF5 file read due to an incomplete fix for CVE-2026-1669. The vulnerability resides in the `H5IOStore._verify_dataset()` and `file_editor.py` methods, which fail to check the `dataset.is_virtual` property of HDF5 datasets. This allows an attacker to craft a malicious `.keras` model archive or `.h5` weights file containing a Virtual Dataset (VDS) that references external HDF5 files on the victim's filesystem. When the victim loads the model using `keras.models.load_model()` or `keras.saving.load_model()`, the external file is transparently read, leading to potential information disclosure. Fixed in versions 3.12.2 and 3.14.1.