Keras code injection vulnerability

GHSA-x4wf-678h-2pmq · CVE-2024-3660 · PYSEC-2026-369 · 갱신 2026. 6. 29.

해야 할 일

keras: 2.13.1rc0 이상으로 올리세요.

영향 받는 패키지

생태계	패키지	수정 버전
PyPI	keras	2.13.1rc0

원문

Keras code injection vulnerability

A arbitrary code injection vulnerability in TensorFlow's Keras framework (<2.13) allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective of the application.

출처

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2024-3660
PACKAGEhttps://github.com/keras-team/keras
WEBhttps://github.com/keras-team/keras/compare/r2.12...r2.13
WEBhttps://kb.cert.org/vuls/id/253266
WEBhttps://www.kb.cert.org/vuls/id/253266

오늘 목록으로

Keras code injection vulnerability (GHSA-x4wf-678h-2pmq) · Sieve