Skip to content
OpenAdvisories

Package · Debian

keras

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-49655

    Keras framework vulnerable to deserialization of untrusted data

    Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s syst…

    Keras Keras keras keras Debian Ubuntu PyPI
  • Critical 9.8
    CVE-2024-3660 Public exploit

    Arbitrary code injection vulnerability in Keras framework < 2.13

    A arbitrary code injection vulnerability in TensorFlow's Keras framework (<2.13) allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective of the application.

    TensorFlow keras keras keras Debian Ubuntu Azure Linux PyPI