Browse CVEs

MEDIUM 6.5 CVE-2026-12482 A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the `filter_safe_tarinfos` valid… Keras No fix yet Fix from $1,6002026-07-14 CRITICAL 9.8 CVE-2026-12481 A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handling of deserialization in the `Lambda` la… Keras Mitigation only Fix from $2,3002026-07-03 HIGH 8.1 CVE-2026-11816 Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in `keras/src/utils/file_utils.py… Keras 3.14.0+ Fix from $1,9502026-06-11 HIGH 7.5 CVE-2026-1669 Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remo… Keras after 3.13.1 Fix from $1,9502026-02-11 HIGH 7.5 CVE-2026-0897 Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allow… Keras after 3.13.0 Fix from $1,9502026-01-15 HIGH 7.3 CVE-2025-9905 The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True. One can create a specially crafted… Keras 3.11.3+ Fix from $1,9502025-09-19 HIGH 7.3 CVE-2025-9906 The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True. One can create a specially crafted… Keras 3.11.0+ Fix from $1,9502025-09-19 HIGH 7.8 CVE-2025-8747 A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code… Keras after 3.10.0 Fix from $1,9502025-08-11 CRITICAL 9.8 CVE-2025-1550 The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras arch… Keras 3.8.0+ Fix from $2,3002025-03-11 MEDIUM 6.5 CVE-2024-55459 An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file funct… Keras Mitigation only Fix from $1,6002025-01-08 CRITICAL 9.8 CVE-2024-3660 A arbitrary code injection vulnerability in TensorFlow's Keras framework (<2.13) allows attackers to execute arbitrary code with the same permissions… Keras 2.13.1+ Fix from $2,3002024-04-16