Threats tagged 'ghsa-gh82-f9x8-5frx'

CVE-2026-12479 is a path traversal vulnerability in keras-team/keras version 3.14.0 affecting the DiskIOStore.make method. It arises from improper sanitization of user-provided layer names used in directory path construction, allowing directory traversal sequences despite restrictions on forward slashes. This can enable an attacker to escape the intended temporary directory and perform unauthorized file system operations such as creating directories or writing files in arbitrary locations.