Database/AI/ML frameworks & serving
Keras (`TorchModuleWrapper`): Unsafe deserialization of attacker-controlled PyTorch pickle inside a Keras model
CVE-2026-12484AI/ML frameworks & servingcurated
Impact
Unsafe deserialization of attacker-controlled PyTorch pickle inside a Keras model
Who can reach it
Customer-supplied model file
What to do
Upgrade past 3.15.0; cross-framework pickle re-entry defeats Keras' own safe mode
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.