Answer in brief
CVE-2026-12482 records a Medium severity (CVSS 6.5) vulnerability in Path Traversal via Symlink Name Validation Bypass in keras-team/keras. The current sources do not mark it as known exploited. The current feed maps keras-team/keras-team/keras (generic), keras (pip), keras (pip), keras (pypi) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 6.5. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps keras-team/keras-team/keras (generic), keras (pip), keras (pip), keras (pypi) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:a:keras:keras:3.12.0:*:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| keras-team/keras-team/kerasgeneric | unspecified | Not reported |
| keraspip | <3.12.3 | 3.12.3 |
| keraspip | >=3.13.0,<3.15.0 | 3.15.0 |
| keraspypi | >=0 <3.12.3 | 3.12.3 |
| keraspypi | >=3.13.0 <3.15.0 | 3.15.0 |
| keraspypi | >=0 <3.12.3 >=3.13.0 <3.15.0 | 3.12.3, 3.15.0 |
Published upstream
Jul 14, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Jul 14, 2026
A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the `filter_safe_tarinfos` validation in `keras/src/utils/file_utils.py`. Specifically, symlink entries are not subjected to the same `is_path_in_dir` validation as regular file entries, allowing symlinks to be created outside the intended extraction directory. This can lead to symlink-based file read, file overwrite, or directory escape attacks. The issue is particularly impactful on Python 3.10 and 3.11, where `filter_safe_tarinfos` is the sole defense against tar path traversal. This vulnerability is distinct from CVE-2025-12060 and other previously reported issues.
Quoted source text, attributed separately from HOL analysis.