Microsoft Security Response Center guidance
Vendor revision: Oct 4, 2026Release Notes
Vulnerability intelligence
CVE-2024-55459 and is rated Medium severity with a CVSS score of 6.5. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
Release Notes
An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file function.
Source: NVD