CVE-2025-12060 — The keras.utils.get_file API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal attack. The utility uses Python's tarfile.extractall function with — CVE Database · The Intelligence Room