CVE-2025-12638 — Keras version 3.11.3 is affected by a path traversal vulnerability in the keras.utils.get_file() function when extracting tar archives. The vulnerability arises because the function uses Python's — CVE Database · The Intelligence Room