{"uuid": "4e549e11-b788-495f-8f54-c640e46019a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12484", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116950068633269215", "content": "keras-team/keras v3.15.0 suffers a HIGH severity deserialization flaw (CVE-2026-12484). Unsafe use of TorchModuleWrapper.from_config can lead to code execution via malicious PyTorch pickle files. Enforce safe deserialization or avoid untrusted configs. https://radar.offseq.com/threat/cve-2026-12484-cwe-502-deserialization-of-untrusted-data-in-keras-team-keras-teamkeras-e9d80dbe8b756225 #OffSeq #Keras #Infosec #CVE2026_12484", "creation_timestamp": "2026-07-20T03:00:28.915456Z"}