[Git][security-tracker-team/security-tracker][master] Add CVE-2026-12570/keras
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Aug 10 08:21:24 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
bd3ab6b9 by Salvatore Bonaccorso at 2026-08-10T09:21:01+02:00
Add CVE-2026-12570/keras
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -141,7 +141,8 @@ CVE-2026-13133 (A vulnerability has been identified in LineInst.exe (LINE for Wi
CVE-2026-12971 (The LearnPress WordPress plugin before 4.4.4 does not validate a user ...)
NOT-FOR-US: WordPress plugin
CVE-2026-12570 (A vulnerability in keras-team/keras versions <= 3.15.0 allows for a de ...)
- TODO: check
+ - keras <removed>
+ [bullseye] - keras <end-of-life> (EOL in bullseye LTS)
CVE-2026-12372 (A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk ...)
- nltk <unfixed>
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2513003
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bd3ab6b9191d678082915e8aefd72f7286386685
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bd3ab6b9191d678082915e8aefd72f7286386685
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260810/59e287f0/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list