https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:25:30 +0000 https://cve.radiocsirt.org/vuln/cve-2025-49655 <p><strong>Affected:</strong> Keras</p> <p>Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s system when loaded despite safe mode being enabled. The vulnerability can be triggered through both local and remote files.</p> <p><strong>Affected:</strong> Keras</p> <p>Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s system when loaded despite safe mode being enabled. The vulnerability can be triggered through both local and remote files.</p> https://cve.radiocsirt.org/vuln/cve-2025-49655 https://cve.radiocsirt.org/vuln/ghsa-cvhh-q5g5-qprp <p><strong>Affected:</strong> PyPI: keras</p> <p>Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s system when loaded despite safe mode being enabled. The vulnerability can be triggered through both local and remote files.</p> <p><strong>Affected:</strong> PyPI: keras</p> <p>Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s system when loaded despite safe mode being enabled. The vulnerability can be triggered through both local and remote files.</p> https://cve.radiocsirt.org/vuln/ghsa-cvhh-q5g5-qprp