keras

3 results · Clear filters · Feed

• Medium 5.5
  CVE-2026-12480

  Arbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/keras

  Keras versions up to and including 3.13.2 are vulnerable to an arbitrary HDF5 file read due to an incomplete fix for CVE-2026-1669. The vulnerability resides in the `H5IOStore._verify_dataset()` and `file_editor.py` methods, which fail to check the `dataset.i…

  Keras keras-team/keras keras keras Debian Ubuntu Azure Linux PyPI
  Jul 1, 2026
• Medium 5.9
  CVE-2025-12058

  Vulnerability in Keras Model.load_model Leading to Arbitrary Local File Loading and SSRF

  The Keras.Model.load_model method, including when executed with the intended security mitigation safe_mode=True, is vulnerable to arbitrary local file loading and Server-Side Request Forgery (SSRF). This vulnerability stems from the way the StringLookup layer…

  Keras Keras kubeflow-pipelines-visualization-server keras Debian Ubuntu Azure Linux Wolfi PyPI
  Oct 29, 2025
• Medium 6.5
  CVE-2024-55459

  keras Path Traversal vulnerability

  An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file function.

  kubeflow-pipelines-visualization-server keras keras keras Debian Ubuntu Azure Linux Wolfi PyPI
  Jan 8, 2025