0 critical · 5 high · 2 medium · 1 low · 8 total (deduped by CVE) · 13 reviewed not-affected
Image datagrok/jkg_python:bleeding-edge · digest sha256:cb8e9d7f14c93054763c53b08ecbec4542d3b323141579667df13867e2a4f758
OpenVEX status affected (an upstream fix exists — the action is to
apply it) or under_investigation (no upstream fix is available yet; a version match
alone does not establish exploitability).
| Vulnerability | Status | Severity | Package | Installed | Fixed in | CVSS | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-54284 | affected | HIGH | sqlparse | 0.5.5 | 0.6 | 8.7 | CVE-2026-54284 |
| CVE-2026-59893 | affected | HIGH | sqlparse | 0.5.5 | 0.6 | 7.5 | CVE-2026-59893 |
| CVE-2026-69247 | affected | HIGH | cryptography | 48.0.1 | 50 | 8.2 | CVE-2026-69247 |
| CVE-2026-69249 | affected | HIGH | cryptography | 48.0.1 | 49 | 8.7 | CVE-2026-69249 |
| CVE-2026-71491 | affected | HIGH | sqlparse | 0.5.5 | 0.6 | 8.7 | CVE-2026-71491 |
| CVE-2026-59894 | affected | MEDIUM | sqlparse | 0.5.5 | 0.6 | 6.2 | CVE-2026-59894 |
| CVE-2026-69248 | affected | MEDIUM | cryptography | 48.0.1 | 49 | 6.9 | CVE-2026-69248 |
| CVE-2025-3000 | affected | LOW | torch | 2.10 | 2.13 | 4.8 | CVE-2025-3000 |
Manually reviewed findings with OpenVEX status not_affected. Each row
carries the spec justification label and the evidence for why the vulnerable code does not affect
this image's functionality (and where that was verified). Excluded from the severity counts above;
present as full statements in the OpenVEX document.
| Vulnerability | Severity | Package | Installed | Justification | Evidence / where |
|---|---|---|---|---|---|
| CVE-2024-55459 | MEDIUM | keras | 2.15 | vulnerable_code_cannot_be_controlled_by_adversary | keras 2.15 is the last Keras-2 release; every fix for this advisory is Keras-3-only, and the kernel keeps Keras 2 while efficientnet and tf.keras (Keras-2 API) user scripts depend on it. Exploitation requires the kernel to load an attacker-supplied model/config file — in this image the only actor able to do that is the script author, who already executes arbitrary code in the same kernel process by design (server-side scripting), so no privilege boundary is crossed. |
| CVE-2025-12058 | MEDIUM | keras | 2.15 | vulnerable_code_cannot_be_controlled_by_adversary | Keras-3-only fix; Keras 2 kept for efficientnet / tf.keras user scripts. Requires loading an attacker-supplied model into a kernel whose script author already executes arbitrary code by design — same rationale as CVE-2024-55459. |
| CVE-2025-12060 | HIGH | keras | 2.15 | vulnerable_code_cannot_be_controlled_by_adversary | Keras-3-only fix; Keras 2 kept for efficientnet / tf.keras user scripts. Requires loading an attacker-supplied model into a kernel whose script author already executes arbitrary code by design — same rationale as CVE-2024-55459. |
| CVE-2025-9906 | HIGH | keras | 2.15 | vulnerable_code_cannot_be_controlled_by_adversary | Keras-3-only fix; Keras 2 kept for efficientnet / tf.keras user scripts. Requires loading an attacker-supplied model into a kernel whose script author already executes arbitrary code by design — same rationale as CVE-2024-55459. |
| CVE-2026-11816 | HIGH | keras | 2.15 | vulnerable_code_cannot_be_controlled_by_adversary | Keras-3-only fix; Keras 2 kept for efficientnet / tf.keras user scripts. Requires loading an attacker-supplied model into a kernel whose script author already executes arbitrary code by design — same rationale as CVE-2024-55459. |
| CVE-2026-12479 | MEDIUM | keras | 2.15 | vulnerable_code_cannot_be_controlled_by_adversary | Keras-3-only fix; Keras 2 kept for efficientnet / tf.keras user scripts. Requires loading an attacker-supplied model into a kernel whose script author already executes arbitrary code by design — same rationale as CVE-2024-55459. |
| CVE-2026-12480 | MEDIUM | keras | 2.15 | vulnerable_code_cannot_be_controlled_by_adversary | Keras-3-only fix; Keras 2 kept for efficientnet / tf.keras user scripts. Requires loading an attacker-supplied model into a kernel whose script author already executes arbitrary code by design — same rationale as CVE-2024-55459. |
| CVE-2026-12481 | HIGH | keras | 2.15 | vulnerable_code_cannot_be_controlled_by_adversary | Keras-3-only fix; Keras 2 kept for efficientnet / tf.keras user scripts. Requires loading an attacker-supplied model into a kernel whose script author already executes arbitrary code by design — same rationale as CVE-2024-55459. |
| CVE-2026-12482 | LOW | keras | 2.15 | vulnerable_code_cannot_be_controlled_by_adversary | Keras-3-only fix; Keras 2 kept for efficientnet / tf.keras user scripts. Requires loading an attacker-supplied model into a kernel whose script author already executes arbitrary code by design — same rationale as CVE-2024-55459. |
| CVE-2026-12484 | HIGH | keras | 2.15 | vulnerable_code_cannot_be_controlled_by_adversary | Keras-3-only fix; Keras 2 kept for efficientnet / tf.keras user scripts. Requires loading an attacker-supplied model into a kernel whose script author already executes arbitrary code by design — same rationale as CVE-2024-55459. |
| CVE-2026-1462 | HIGH | keras | 2.15 | vulnerable_code_cannot_be_controlled_by_adversary | Keras-3-only fix; Keras 2 kept for efficientnet / tf.keras user scripts. Requires loading an attacker-supplied model into a kernel whose script author already executes arbitrary code by design — same rationale as CVE-2024-55459. |
| CVE-2026-9335 | MEDIUM | keras | 2.15 | vulnerable_code_cannot_be_controlled_by_adversary | Keras-3-only fix; Keras 2 kept for efficientnet / tf.keras user scripts. Requires loading an attacker-supplied model into a kernel whose script author already executes arbitrary code by design — same rationale as CVE-2024-55459. |
| CVE-2026-0994 | HIGH | protobuf | 4.25.9 | vulnerable_code_cannot_be_controlled_by_adversary | python-protobuf is capped <5 by tensorflow 2.15 (kept for the Keras-2 API). The parse-time resource exhaustion can only be triggered by input the script author feeds their own kernel process, which they can already terminate directly; no other principal parses protobuf here. |