Skip to content
OpenAdvisories

Vendor

Keras

15 known vulnerabilities.

Products

keras-team/keras 10 Keras 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-49655

    Keras framework vulnerable to deserialization of untrusted data

    Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s syst…

    Keras Keras keras keras Debian Ubuntu PyPI