Skip to content
OpenAdvisories

Package · Debian

keras

19 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-9335 Public exploit

    Improper Handling of HDF5 ExternalLinks in keras-team/keras

    A vulnerability in keras-team/keras versions <= 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5 ExternalLinks. The `KerasFileEditor` and `keras.saving.load_weights` functions bypass the `safe_get_h5_group` and `safe…