{"metadata": {"vulnerability": "CVE-2025-1550", "count": 28, "kinds": {"milestone": 7, "sighting": 7, "kev": 0, "other": 14}}, "data": [{"timestamp": "2025-02-21T11:13:03.951Z", "date_only": false, "value": "2025-02-21T11:13:03.951Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-1550", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-02T00:00:00Z", "date_only": false, "value": "2025-03-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-1550", "record": "MSRC_CVE-2025-1550", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-03-11T08:12:34.974Z", "date_only": false, "value": "2025-03-11T08:12:34.974Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-1550", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-03-11T08:38:53Z", "date_only": false, "value": "2025-03-11T08:38:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7118", "record": "CVE-2025-1550", "field": "creation_timestamp", "uuid": "f1a3a3b7-7090-4d49-90bf-a7446215258d", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1550\n\ud83d\udd25 CVSS Score: 7.3 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive. By altering the config.json file within the archive, an attacker can specify arbitrary Python modules and functions, along with their arguments, to be loaded and executed during model loading.\n\ud83d\udccf Published: 2025-03-11T08:12:34.974Z\n\ud83d\udccf Modified: 2025-03-11T08:12:34.974Z\n\ud83d\udd17 References:\n1. https://github.com/keras-team/keras/pull/20751", "url": "https://t.me/DarkWebInformer_CVEAlerts/7118"}, {"timestamp": "2025-03-11T09:15:00Z", "date_only": false, "value": "2025-03-11T09:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-1550", "record": "UBUNTU-CVE-2025-1550", "field": "published"}, {"timestamp": "2025-03-11T09:15:25.217Z", "date_only": false, "value": "2025-03-11T09:15:25.217", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1550", "record": "FKIE_CVE-2025-1550", "field": "published"}, {"timestamp": "2025-03-11T09:15:25.217Z", "date_only": false, "value": "2025-03-11T09:15:25.217Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2025-122", "record": "PYSEC-2025-122", "field": "published"}, {"timestamp": "2025-03-11T10:30:14Z", "date_only": false, "value": "2025-03-11T10:30:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/pkXIaiZyZuzT_Pl6hZZWn5mEgJvxrDSmjrnTe04Bm5-D6EY", "record": "CVE-2025-1550", "field": "creation_timestamp", "uuid": "91b3f499-5ecc-495f-ac17-baa8d4bb3960"}, {"timestamp": "2025-03-11T11:46:19Z", "date_only": false, "value": "2025-03-11T11:46:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/20053", "record": "CVE-2025-1550", "field": "creation_timestamp", "uuid": "eafbac41-50f0-4b39-bd27-493bee92568e", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1550 - Apache Keras Safe Mode RCE Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1550 \nPublished : March 11, 2025, 9:15 a.m. | 50\u00a0minutes ago \nDescription : The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive. By altering the config.json file within the archive, an attacker can specify arbitrary Python modules and functions, along with their arguments, to be loaded and executed during model loading. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/20053"}, {"timestamp": "2025-03-11T20:07:32Z", "date_only": false, "value": "2025-03-11T20:07:32Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-48G7-3X6R-XFHP", "record": "GHSA-48G7-3X6R-XFHP", "field": "published"}, {"timestamp": "2025-03-14T07:13:32.853Z", "date_only": false, "value": "2025-03-14T07:13:32.853693Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lkd2qkl7n227", "record": "cve-2025-1550", "field": "creation_timestamp", "uuid": "1acf6b59-463e-411e-9833-24e4a4944056", "url": "https://bsky.app/profile/shiojiri.com/post/3lkd2qkl7n227"}, {"timestamp": "2025-03-18T00:00:00Z", "date_only": false, "value": "2025-03-18T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-1550", "record": "MSRC_CVE-2025-1550", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-03-18T00:00:00Z", "date_only": false, "value": "2025-03-18T00:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-1550", "record": "MSRC_CVE-2025-1550", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-05-11T12:00:52Z", "date_only": false, "value": "2025-05-11T12:00:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/9845", "record": "CVE-2025-1550", "field": "creation_timestamp", "uuid": "1cc3daca-3c19-4d5c-ac9b-5d11899cc721", "content": "Inside CVE-2025-1550: Remote Code Execution via Keras Models\n\nhttps://blog.huntr.com/inside-cve-2025-1550-remote-code-execution-via-keras-models", "url": "https://t.me/thebugbountyhunter/9845"}, {"timestamp": "2025-07-17T21:02:29.350Z", "date_only": false, "value": "2025-07-17T21:02:29.350888Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lu6tdma2e32w", "record": "CVE-2025-1550", "field": "creation_timestamp", "uuid": "b660c906-0245-4616-b4e0-eced17b0846d", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lu6tdma2e32w"}, {"timestamp": "2025-07-22T15:26:36.374Z", "date_only": false, "value": "2025-07-22T15:26:36.374Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Google", "record": "CVE-2025-1550", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-07-24T15:28:37.159Z", "date_only": false, "value": "2025-07-24T15:28:37.159599Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-1550", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-07-24T15:28:37.159Z", "date_only": false, "value": "2025-07-24T15:28:37.159599Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1550", "record": "FKIE_CVE-2025-1550", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-07-24T15:28:42.230Z", "date_only": false, "value": "2025-07-24T15:28:42.230Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-1550", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-07-24T15:28:42.230Z", "date_only": false, "value": "2025-07-24T15:28:42.230Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-1550", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-08-01T00:00:00Z", "date_only": false, "value": "2025-08-01T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-1550", "record": "MSRC_CVE-2025-1550", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-08-01T00:00:00Z", "date_only": false, "value": "2025-08-01T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-1550", "record": "MSRC_CVE-2025-1550", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-10-24T05:16:29Z", "date_only": false, "value": "2025-10-24T05:16:29Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-1550", "record": "UBUNTU-CVE-2025-1550", "field": "modified"}, {"timestamp": "2026-01-05T08:06:01.317Z", "date_only": false, "value": "2026-01-05T08:06:01.317Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-1550", "record": "MSRC_CVE-2025-1550", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-20T09:19:03.485Z", "date_only": false, "value": "2026-05-20T09:19:03.485572Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2025-122", "record": "PYSEC-2025-122", "field": "modified"}, {"timestamp": "2026-06-06T00:30:36Z", "date_only": false, "value": "2026-06-06T00:30:36Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-48G7-3X6R-XFHP", "record": "GHSA-48G7-3X6R-XFHP", "field": "modified"}, {"timestamp": "2026-06-17T08:39:21.253Z", "date_only": false, "value": "2026-06-17T08:39:21.253", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1550", "record": "FKIE_CVE-2025-1550", "field": "lastModified"}, {"timestamp": "2026-10-22T20:26:49Z", "date_only": false, "value": "2026-10-22T20:26:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/mtholmquist/eba1cba80ea66997b8f7e6a839e49120", "record": "CVE-2025-1550", "field": "creation_timestamp", "uuid": "576c6725-86ba-457a-b0d7-ea47eae47bc2", "url": "https://gist.github.com/mtholmquist/eba1cba80ea66997b8f7e6a839e49120"}]}