Skip to content
OpenAdvisories

Package · Azure Linux

keras

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2026-0897 Public exploit

    Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata

    Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory exhaustion and a crash of the Python int…

    Google Keras kubeflow-pipelines-visualization-server keras Debian Ubuntu Azure Linux Wolfi PyPI
  • High 7.3
    CVE-2025-1550 Public exploit

    Arbitrary Code Execution via Crafted Keras Config for Model Loading

    The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive. By altering the config.json file within the archive, an attacker can specify arbitrary Python modules and…

    Google Keras kubeflow-pipelines-visualization-server keras Ubuntu Azure Linux Wolfi PyPI
  • Critical 9.8
    CVE-2024-3660 Public exploit

    Arbitrary code injection vulnerability in Keras framework < 2.13

    A arbitrary code injection vulnerability in TensorFlow's Keras framework (<2.13) allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective of the application.

    TensorFlow keras keras keras Debian Ubuntu Azure Linux PyPI