https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 21 Jul 2026 22:01:27 +0000 https://vulnerability.circl.lu/sighting/38e7bf82-5b1d-42ba-8139-147bd14b635f/export {"uuid": "38e7bf82-5b1d-42ba-8139-147bd14b635f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12484", "type": "seen", "source": "https://t.me/bdufstecru/3331", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 TorchModuleWrapper.from_config() \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Keras \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-10105\nCVE-2026-12484\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0437\u0430\u043c\u043a\u043d\u0443\u0442\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0438\u0437 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n- \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439;\n- \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435/\u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.", "creation_timestamp": "2026-07-21T00:00:38.135308Z"} {"uuid": "38e7bf82-5b1d-42ba-8139-147bd14b635f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12484", "type": "seen", "source": "https://t.me/bdufstecru/3331", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 TorchModuleWrapper.from_config() \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Keras \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-10105\nCVE-2026-12484\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0437\u0430\u043c\u043a\u043d\u0443\u0442\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0438\u0437 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n- \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439;\n- \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435/\u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.", "creation_timestamp": "2026-07-21T00:00:38.135308Z"} https://vulnerability.circl.lu/sighting/38e7bf82-5b1d-42ba-8139-147bd14b635f/export Tue, 21 Jul 2026 00:00:38 +0000 https://vulnerability.circl.lu/sighting/4db3286e-5b7c-4389-a194-80a1344b390e/export {"uuid": "4db3286e-5b7c-4389-a194-80a1344b390e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12484", "type": "seen", "source": "https://t.me/bdufstecru/3331", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 TorchModuleWrapper.from_config() \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Keras \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-10105\nCVE-2026-12484\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0437\u0430\u043c\u043a\u043d\u0443\u0442\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0438\u0437 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n- \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439;\n- \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435/\u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.", "creation_timestamp": "2026-07-20T15:00:03.292245Z"} {"uuid": "4db3286e-5b7c-4389-a194-80a1344b390e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12484", "type": "seen", "source": "https://t.me/bdufstecru/3331", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 TorchModuleWrapper.from_config() \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Keras \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-10105\nCVE-2026-12484\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0437\u0430\u043c\u043a\u043d\u0443\u0442\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0438\u0437 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n- \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439;\n- \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435/\u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.", "creation_timestamp": "2026-07-20T15:00:03.292245Z"} https://vulnerability.circl.lu/sighting/4db3286e-5b7c-4389-a194-80a1344b390e/export Mon, 20 Jul 2026 15:00:03 +0000 https://vulnerability.circl.lu/sighting/1e25c41a-1cf9-4791-b762-47a49a31c68e/export {"uuid": "1e25c41a-1cf9-4791-b762-47a49a31c68e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12484", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr2jecelou2q", "content": "Daily IT Security Digest \u2014 2026-07-20\n(CVE-2026-12484)**\n keras-team/keras v3.15.0 suffers a HIGH severity deserialization vulnerability. The unsafe use of `TorchModuleWrapper.from_config` allows attackers to achieve code execution by crafting malicious PyTorch pickle files. This affects users", "creation_timestamp": "2026-07-20T05:03:42.932508Z"} {"uuid": "1e25c41a-1cf9-4791-b762-47a49a31c68e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12484", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr2jecelou2q", "content": "Daily IT Security Digest \u2014 2026-07-20\n(CVE-2026-12484)**\n keras-team/keras v3.15.0 suffers a HIGH severity deserialization vulnerability. The unsafe use of `TorchModuleWrapper.from_config` allows attackers to achieve code execution by crafting malicious PyTorch pickle files. This affects users", "creation_timestamp": "2026-07-20T05:03:42.932508Z"} https://vulnerability.circl.lu/sighting/1e25c41a-1cf9-4791-b762-47a49a31c68e/export Mon, 20 Jul 2026 05:03:42 +0000 https://vulnerability.circl.lu/sighting/c74ff5c2-14de-42b9-b2e3-378e58ae50fc/export {"uuid": "c74ff5c2-14de-42b9-b2e3-378e58ae50fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12484", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mr2chy65h42r", "content": "keras-team/keras v3.15.0 HIGH vuln: Unsafe deserialization in TorchModuleWrapper.from_config risks code execution if untrusted configs are loaded. Avoid unsafe configs or enforce SafeModeScope until a fix. https://radar.offseq.com/threat/cve-2026-12484-cwe-502-deserialization-of-untrusted-data-in...", "creation_timestamp": "2026-07-20T03:00:32.168174Z"} {"uuid": "c74ff5c2-14de-42b9-b2e3-378e58ae50fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12484", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mr2chy65h42r", "content": "keras-team/keras v3.15.0 HIGH vuln: Unsafe deserialization in TorchModuleWrapper.from_config risks code execution if untrusted configs are loaded. Avoid unsafe configs or enforce SafeModeScope until a fix. https://radar.offseq.com/threat/cve-2026-12484-cwe-502-deserialization-of-untrusted-data-in...", "creation_timestamp": "2026-07-20T03:00:32.168174Z"} https://vulnerability.circl.lu/sighting/c74ff5c2-14de-42b9-b2e3-378e58ae50fc/export Mon, 20 Jul 2026 03:00:32 +0000 https://vulnerability.circl.lu/sighting/4e549e11-b788-495f-8f54-c640e46019a7/export {"uuid": "4e549e11-b788-495f-8f54-c640e46019a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12484", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116950068633269215", "content": "keras-team/keras v3.15.0 suffers a HIGH severity deserialization flaw (CVE-2026-12484). Unsafe use of TorchModuleWrapper.from_config can lead to code execution via malicious PyTorch pickle files. Enforce safe deserialization or avoid untrusted configs. https://radar.offseq.com/threat/cve-2026-12484-cwe-502-deserialization-of-untrusted-data-in-keras-team-keras-teamkeras-e9d80dbe8b756225 #OffSeq #Keras #Infosec #CVE2026_12484", "creation_timestamp": "2026-07-20T03:00:28.915456Z"} {"uuid": "4e549e11-b788-495f-8f54-c640e46019a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12484", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116950068633269215", "content": "keras-team/keras v3.15.0 suffers a HIGH severity deserialization flaw (CVE-2026-12484). Unsafe use of TorchModuleWrapper.from_config can lead to code execution via malicious PyTorch pickle files. Enforce safe deserialization or avoid untrusted configs. https://radar.offseq.com/threat/cve-2026-12484-cwe-502-deserialization-of-untrusted-data-in-keras-team-keras-teamkeras-e9d80dbe8b756225 #OffSeq #Keras #Infosec #CVE2026_12484", "creation_timestamp": "2026-07-20T03:00:28.915456Z"} https://vulnerability.circl.lu/sighting/4e549e11-b788-495f-8f54-c640e46019a7/export Mon, 20 Jul 2026 03:00:28 +0000 https://vulnerability.circl.lu/sighting/eaca26ef-e6ec-44e2-8979-075d2d20e035/export {"uuid": "eaca26ef-e6ec-44e2-8979-075d2d20e035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12484", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mqzzeol3rj2i", "content": "Another Python Tragedy: Trust Pickle, Lose Control, Pretend You Were Surprised\nPANIC 78% | Lag 0.0h | CVE-2026-12484 is an insecure deserialization flaw in Keras-Team tooling involving unsafe PyTorch pi\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-07-20T00:17:36.029854Z"} {"uuid": "eaca26ef-e6ec-44e2-8979-075d2d20e035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12484", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mqzzeol3rj2i", "content": "Another Python Tragedy: Trust Pickle, Lose Control, Pretend You Were Surprised\nPANIC 78% | Lag 0.0h | CVE-2026-12484 is an insecure deserialization flaw in Keras-Team tooling involving unsafe PyTorch pi\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-07-20T00:17:36.029854Z"} https://vulnerability.circl.lu/sighting/eaca26ef-e6ec-44e2-8979-075d2d20e035/export Mon, 20 Jul 2026 00:17:36 +0000 https://vulnerability.circl.lu/sighting/fea4835f-c161-463d-ab9a-93507ca7120a/export {"uuid": "fea4835f-c161-463d-ab9a-93507ca7120a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12484", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116949132770600340", "content": "CVE-2026-12484 - Insecure Deserialization in Keras-Team. Unsafe PyTorch pickle loading in torch.load via TorchModuleWrapper.from_config. CVSS 7.8. Patch unknown, restrict usage immediately. #CVE #infosec #AIsecurity\nhttps://www.valtersit.com/cve/CVE-2026-12484/", "creation_timestamp": "2026-07-19T23:02:29.056987Z"} {"uuid": "fea4835f-c161-463d-ab9a-93507ca7120a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12484", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116949132770600340", "content": "CVE-2026-12484 - Insecure Deserialization in Keras-Team. Unsafe PyTorch pickle loading in torch.load via TorchModuleWrapper.from_config. CVSS 7.8. Patch unknown, restrict usage immediately. #CVE #infosec #AIsecurity\nhttps://www.valtersit.com/cve/CVE-2026-12484/", "creation_timestamp": "2026-07-19T23:02:29.056987Z"} https://vulnerability.circl.lu/sighting/fea4835f-c161-463d-ab9a-93507ca7120a/export Sun, 19 Jul 2026 23:02:29 +0000 https://vulnerability.circl.lu/sighting/524dca09-6c28-442e-9ca8-9ad375c98f4a/export {"uuid": "524dca09-6c28-442e-9ca8-9ad375c98f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12484", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqzv6do6432o", "content": "CVE-2026-12484 - Insecure Deserialization in Keras-Team. Unsafe PyTorch pickle loading in torch.load via TorchModuleWrapper.from_config. CVSS 7.8. Patch unknown, restrict usage immediately. #CVE #infosec #AIsecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-12484/", "creation_timestamp": "2026-07-19T23:02:28.330196Z"} {"uuid": "524dca09-6c28-442e-9ca8-9ad375c98f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12484", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqzv6do6432o", "content": "CVE-2026-12484 - Insecure Deserialization in Keras-Team. Unsafe PyTorch pickle loading in torch.load via TorchModuleWrapper.from_config. CVSS 7.8. Patch unknown, restrict usage immediately. #CVE #infosec #AIsecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-12484/", "creation_timestamp": "2026-07-19T23:02:28.330196Z"} https://vulnerability.circl.lu/sighting/524dca09-6c28-442e-9ca8-9ad375c98f4a/export Sun, 19 Jul 2026 23:02:28 +0000 https://vulnerability.circl.lu/sighting/115c05c9-b626-4463-b4fd-4dd03bd2df3d/export {"uuid": "115c05c9-b626-4463-b4fd-4dd03bd2df3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12484", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mqzrpsvfhx2m", "content": "Keras 3.15.0\u3067\u3001`from_config`\u30e1\u30bd\u30c3\u30c9\u304cPyTorch\u306epickle\u30c7\u30fc\u30bf\u3092\u5b89\u5168\u3067\u306a\u3044\u65b9\u6cd5\u3067\u30c7\u30b7\u30ea\u30a2\u30e9\u30a4\u30ba\u3002\u4fe1\u983c\u3067\u304d\u306a\u3044\u8a2d\u5b9a\u3092\u51e6\u7406\u3059\u308b\u3068\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u304c\u3042\u2026\nCVE-2026-12484 CVSS 7.8 | HIGH", "creation_timestamp": "2026-07-19T22:00:39.917214Z"} {"uuid": "115c05c9-b626-4463-b4fd-4dd03bd2df3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12484", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mqzrpsvfhx2m", "content": "Keras 3.15.0\u3067\u3001`from_config`\u30e1\u30bd\u30c3\u30c9\u304cPyTorch\u306epickle\u30c7\u30fc\u30bf\u3092\u5b89\u5168\u3067\u306a\u3044\u65b9\u6cd5\u3067\u30c7\u30b7\u30ea\u30a2\u30e9\u30a4\u30ba\u3002\u4fe1\u983c\u3067\u304d\u306a\u3044\u8a2d\u5b9a\u3092\u51e6\u7406\u3059\u308b\u3068\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u304c\u3042\u2026\nCVE-2026-12484 CVSS 7.8 | HIGH", "creation_timestamp": "2026-07-19T22:00:39.917214Z"} https://vulnerability.circl.lu/sighting/115c05c9-b626-4463-b4fd-4dd03bd2df3d/export Sun, 19 Jul 2026 22:00:39 +0000 https://vulnerability.circl.lu/sighting/101349a8-6a25-4dcf-a20c-d94ec1701e10/export {"uuid": "101349a8-6a25-4dcf-a20c-d94ec1701e10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12484", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqzrhgdo6n27", "content": "CVE-2026-12484 - Unsafe Deserialization in keras.layers.TorchModuleWrapper.from_config\nCVE ID : CVE-2026-12484\n \n Published : July 19, 2026, 8:16 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of ...", "creation_timestamp": "2026-07-19T21:55:58.416928Z"} {"uuid": "101349a8-6a25-4dcf-a20c-d94ec1701e10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12484", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqzrhgdo6n27", "content": "CVE-2026-12484 - Unsafe Deserialization in keras.layers.TorchModuleWrapper.from_config\nCVE ID : CVE-2026-12484\n \n Published : July 19, 2026, 8:16 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of ...", "creation_timestamp": "2026-07-19T21:55:58.416928Z"} https://vulnerability.circl.lu/sighting/101349a8-6a25-4dcf-a20c-d94ec1701e10/export Sun, 19 Jul 2026 21:55:58 +0000