{
  "@id": "urn:uuid:de43dad0-4b9c-49e7-bbf3-c8a7d66c5617",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 1,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-02T08:02:59.966216+00:00",
  "statements": [
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/keras@2.15.0.post3+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/keras@2.15.0.post3+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-02T08:02:59.966216+00:00",
      "status_notes": "Vulnerability CVE-2024-3660 is fixed in version 2.15.0.post3+tuxcare of keras.",
      "vulnerability": {
        "name": "CVE-2024-3660"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/keras@2.15.0.post3+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/keras@2.15.0.post3+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-02T08:02:59.966216+00:00",
      "status_notes": "Vulnerability CVE-2024-55459 affects version 2.15.0.post3+tuxcare of keras.",
      "vulnerability": {
        "name": "CVE-2024-55459"
      },
      "action_statement": "Vulnerability CVE-2024-55459 affects version 2.15.0.post3+tuxcare of keras."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/keras@2.15.0.post3+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/keras@2.15.0.post3+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-02T08:02:59.966216+00:00",
      "status_notes": "Vulnerability CVE-2025-12058 affects version 2.15.0.post3+tuxcare of keras.",
      "vulnerability": {
        "name": "CVE-2025-12058"
      },
      "action_statement": "Vulnerability CVE-2025-12058 affects version 2.15.0.post3+tuxcare of keras."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/keras@2.15.0.post3+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/keras@2.15.0.post3+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-02T08:02:59.966216+00:00",
      "status_notes": "Vulnerability CVE-2025-12060 is fixed in version 2.15.0.post3+tuxcare of keras.",
      "vulnerability": {
        "name": "CVE-2025-12060"
      }
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:pypi/keras@2.15.0.post3+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/keras@2.15.0.post3+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-02T08:02:59.966216+00:00",
      "status_notes": "Vulnerability CVE-2025-9906 does not affect version 2.15.0.post3+tuxcare of keras. keras 2.15.0: vulnerable API (keras.config.enable_unsafe_deserialization / KerasSaveable, keras 3.0-3.10) absent in 2.x; malicious .keras gadget fails with TypeError. esultanaliev 2026-10-02",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2025-9906"
      },
      "impact_statement": "keras 2.15.0: vulnerable API (keras.config.enable_unsafe_deserialization / KerasSaveable, keras 3.0-3.10) absent in 2.x; malicious .keras gadget fails with TypeError. esultanaliev 2026-10-02"
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:pypi/keras@2.15.0.post3+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/keras@2.15.0.post3+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-02T08:02:59.966216+00:00",
      "status_notes": "Vulnerability CVE-2026-0897 does not affect version 2.15.0.post3+tuxcare of keras. keras 2.15.0: fix is in KerasFileEditor (keras/src/saving/file_editor.py), module absent in 2.x. esultanaliev 2026-10-02",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-0897"
      },
      "impact_statement": "keras 2.15.0: fix is in KerasFileEditor (keras/src/saving/file_editor.py), module absent in 2.x. esultanaliev 2026-10-02"
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/keras@2.15.0.post3+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/keras@2.15.0.post3+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-02T08:02:59.966216+00:00",
      "status_notes": "Vulnerability CVE-2026-11816 is fixed in version 2.15.0.post3+tuxcare of keras.",
      "vulnerability": {
        "name": "CVE-2026-11816"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/keras@2.15.0.post3+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/keras@2.15.0.post3+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-02T08:02:59.966216+00:00",
      "status_notes": "Vulnerability CVE-2026-12479 affects version 2.15.0.post3+tuxcare of keras.",
      "vulnerability": {
        "name": "CVE-2026-12479"
      },
      "action_statement": "Vulnerability CVE-2026-12479 affects version 2.15.0.post3+tuxcare of keras."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/keras@2.15.0.post3+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/keras@2.15.0.post3+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-02T08:02:59.966216+00:00",
      "status_notes": "Vulnerability CVE-2026-12480 affects version 2.15.0.post3+tuxcare of keras.",
      "vulnerability": {
        "name": "CVE-2026-12480"
      },
      "action_statement": "Vulnerability CVE-2026-12480 affects version 2.15.0.post3+tuxcare of keras."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/keras@2.15.0.post3+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/keras@2.15.0.post3+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-02T08:02:59.966216+00:00",
      "status_notes": "Vulnerability CVE-2026-12481 is fixed in version 2.15.0.post3+tuxcare of keras.",
      "vulnerability": {
        "name": "CVE-2026-12481"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/keras@2.15.0.post3+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/keras@2.15.0.post3+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-02T08:02:59.966216+00:00",
      "status_notes": "Vulnerability CVE-2026-12482 affects version 2.15.0.post3+tuxcare of keras.",
      "vulnerability": {
        "name": "CVE-2026-12482"
      },
      "action_statement": "Vulnerability CVE-2026-12482 affects version 2.15.0.post3+tuxcare of keras."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:pypi/keras@2.15.0.post3+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/keras@2.15.0.post3+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-02T08:02:59.966216+00:00",
      "status_notes": "Vulnerability CVE-2026-12484 does not affect version 2.15.0.post3+tuxcare of keras. keras 2.15.0: TorchModuleWrapper absent in 2.x (TF-only). esultanaliev 2026-10-02",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-12484"
      },
      "impact_statement": "keras 2.15.0: TorchModuleWrapper absent in 2.x (TF-only). esultanaliev 2026-10-02"
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/keras@2.15.0.post3+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/keras@2.15.0.post3+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-02T08:02:59.966216+00:00",
      "status_notes": "Vulnerability CVE-2026-12570 affects version 2.15.0.post3+tuxcare of keras.",
      "vulnerability": {
        "name": "CVE-2026-12570"
      },
      "action_statement": "Vulnerability CVE-2026-12570 affects version 2.15.0.post3+tuxcare of keras."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:pypi/keras@2.15.0.post3+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/keras@2.15.0.post3+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-02T08:02:59.966216+00:00",
      "status_notes": "Vulnerability CVE-2026-1462 does not affect version 2.15.0.post3+tuxcare of keras. Not applicable to keras 2.15.0: TFSMLayer was introduced in Keras 3.x; class and file (keras/src/export/tfsm_layer.py) do not exist in 2.x line. Per NVD, scoped to keras 3.13.0. Ref: https://nvd.nist.gov/vuln/detail/CVE-2026-1462",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-1462"
      },
      "impact_statement": "Not applicable to keras 2.15.0: TFSMLayer was introduced in Keras 3.x; class and file (keras/src/export/tfsm_layer.py) do not exist in 2.x line. Per NVD, scoped to keras 3.13.0. Ref: https://nvd.nist.gov/vuln/detail/CVE-2026-1462"
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/keras@2.15.0.post3+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/keras@2.15.0.post3+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-02T08:02:59.966216+00:00",
      "status_notes": "Vulnerability CVE-2026-9335 affects version 2.15.0.post3+tuxcare of keras.",
      "vulnerability": {
        "name": "CVE-2026-9335"
      },
      "action_statement": "Vulnerability CVE-2026-9335 affects version 2.15.0.post3+tuxcare of keras."
    }
  ]
}