Skip to content
OpenAdvisories

Package · Debian

keras

19 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.1

    Path Traversal via Symlink Name Validation Bypass in keras-team/keras

    A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the `filter_safe_tarinfos` validation in `keras/src/utils/file_utils.py`. Specifically, symlink entries are not subjected to the same `is_path…