{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"keras","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:11","exploited":false,"fixed_versions":[],"id":"tcs_01M5NQD2CMNBKXMR8WMC36Y0HT","modified_at":"2026-08-27T23:06:10.583622186Z","published_at":"2026-06-11T14:16:26.557Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-11816","https://security-tracker.debian.org/tracker/CVE-2026-11816"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-11816","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-11816"}],"summary":"Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in `keras/src/utils/file_utils.py`. The functions `filter_safe_tarinfos()` and `filt"}