{"data":{"id":"9d229a57-7f45-4fd6-b584-7fa6ecb4b799","title":"CVE-2026-12482: A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses…","summary":"CVE-2026-12482 affects keras-team/keras version 3.12.0. A crafted tar archive can bypass the `filter_safe_tarinfos` validation in `keras/src/utils/file_utils.py`, because symlink entries skip the `is_path_in_dir` check applied to regular files. Symlinks can then be created outside the extraction directory, enabling symlink-based file read, file overwrite, or directory escape. The source says the impact is greatest on Python 3.10 and 3.11, where this filter is the sole defense against tar path traversal.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-12482","publishedAt":"2026-07-14T06:16:59.527Z","cveId":"CVE-2026-12482","cweIds":["CWE-22"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["keras@< 3.12.3 (fixed: 3.12.3)","keras@>= 3.13.0, < 3.15.0 (fixed: 3.15.0)"],"affectedPackageNames":["keras"],"affectedPackageRefs":["pypi:keras"],"affectedVendors":[],"affectedVendorsRaw":["Keras 3.12.0","keras-team/keras"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"keras-team/keras tar extraction allows symlinks outside extraction directory","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0033,"epssCheckedAt":"2026-10-14T12:12:43.169Z","kevDateAdded":null,"advisoryAliases":["GHSA-58hv-7753-xmfq"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:46:46.480Z","patchAvailable":true,"disclosureDate":"2026-07-14T06:16:59.527Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}