Daily digest · Jul 19, 2026
Keras TorchModuleWrapper Flaw Enables RCE via Unsafe Pickle Deserialization
A critical high-severity vulnerability in Keras 3.15.0 allows arbitrary code execution through unsafe PyTorch pickle deserialization in TorchModuleWrapper, demanding immediate patching for ML platforms processing untrusted model configurations.
Subscribers only
The full Daily Briefing is available to VulnWatch subscribers. Subscribe to read this digest and get tomorrow's delivered to your inbox.
See pricing