Homepage

CVE-2025-12060 Affecting py3.12-keras package, versions <3.12.0-r0

Severity

 Recommended
low

Based on default assessment until relevant scores are available.

Threat Intelligence

EPSS
0.18% (41st percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-MINIMOSLATEST-PY312KERAS-13814942
  • published3 Nov 2025
  • disclosed30 Oct 2025
Report a new vulnerability Found a mistake?

Introduced: 30 Oct 2025

NewCVE-2025-12060  (opens in a new tab)

How to fix?

Upgrade Minimos:latest py3.12-keras to version 3.12.0-r0 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream py3.12-keras package and not the py3.12-keras package as distributed by Minimos. See How to fix? for Minimos:latest relevant fixed versions and status.

The keras.utils.get_file API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal attack. The utility uses Python's tarfile.extractall function without the filter="data" feature. A remote attacker can craft a malicious tar archive containing special symlinks, which, when extracted, allows them to write arbitrary files to any location on the filesystem outside of the intended destination folder. This vulnerability is linked to the underlying Python tarfile weakness, identified as CVE-2025-4517. Note that upgrading Python to one of the versions that fix CVE-2025-4517 (e.g. Python 3.13.4) is not enough. One additionally needs to upgrade Keras to a version with the fix (Keras 3.12).