Vulnerability index

Browse CVEs

11 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Keras MEDIUM 6.5
CVE-2026-12482

A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the `filter_safe_tarinfos` valid…

No fix yet
Fix from $1,600 2026-07-14
Keras CRITICAL 9.8
CVE-2026-12481

A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handling of deserialization in the `Lambda` la…

Mitigation only
Fix from $2,300 2026-07-03
Keras HIGH 8.1
CVE-2026-11816

Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in `keras/src/utils/file_utils.py…

Fix: 3.14.0+
Fix from $1,950 2026-06-11
Keras HIGH 7.5
CVE-2026-1669

Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remo…

Fix: after 3.13.1
Fix from $1,950 2026-02-11
Keras HIGH 7.5
CVE-2026-0897

Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allow…

Fix: after 3.13.0
Fix from $1,950 2026-01-15
Keras HIGH 7.3
CVE-2025-9905

The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True. One can create a specially crafted…

Fix: 3.11.3+
Fix from $1,950 2025-09-19
Keras HIGH 7.3
CVE-2025-9906

The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True. One can create a specially crafted…

Fix: 3.11.0+
Fix from $1,950 2025-09-19
Keras HIGH 7.8
CVE-2025-8747

A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code…

Fix: after 3.10.0
Fix from $1,950 2025-08-11
Keras CRITICAL 9.8
CVE-2025-1550

The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras arch…

Fix: 3.8.0+
Fix from $2,300 2025-03-11
Keras MEDIUM 6.5
CVE-2024-55459

An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file funct…

Mitigation only
Fix from $1,600 2025-01-08
Keras CRITICAL 9.8
CVE-2024-3660

A arbitrary code injection vulnerability in TensorFlow's Keras framework (<2.13) allows attackers to execute arbitrary code with the same permissions…

Fix: 2.13.1+
Fix from $2,300 2024-04-16