[Git][security-tracker-team/security-tracker][master] Add CVE-2025-12060/keras

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
04206ad9 by Salvatore Bonaccorso at 2025-10-30T21:45:28+01:00
Add CVE-2025-12060/keras

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -124,7 +124,9 @@ CVE-2025-12516 (Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affec
 CVE-2025-12515 (Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects  ...)
 	NOT-FOR-US: Azure Access Technology
 CVE-2025-12060 (The keras.utils.get_file API in Keras, when used with the extract=True ...)
-	TODO: check
+	- keras <removed>
+	NOTE: https://github.com/keras-team/keras/pull/21760
+	NOTE: https://github.com/keras-team/keras/security/advisories/GHSA-hjqc-jx6g-rwp9
 CVE-2025-11998 (The following HP Card Readers B Models(X3D03B & Y7C05B) are potentiall ...)
 	NOT-FOR-US: HP
 CVE-2025-10348 (URVE Smart Office is vulnerable to Stored XSS in report problem functi ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/04206ad929fb7aaf4f952b3d680d7fccddb5a8f0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/04206ad929fb7aaf4f952b3d680d7fccddb5a8f0
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251030/6a82c8cb/attachment-0001.htm>