Skip to content
OpenAdvisories

Vendor

TensorFlow

403 known vulnerabilities.

Products

TensorFlow 402 keras 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-3660 Public exploit

    Arbitrary code injection vulnerability in Keras framework < 2.13

    A arbitrary code injection vulnerability in TensorFlow's Keras framework (<2.13) allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective of the application.

    TensorFlow keras keras keras Debian Ubuntu PyPI
  • Critical 9.3
    CVE-2021-37678 Public exploit

    Arbitrary code execution due to YAML deserialization

    TensorFlow is an end-to-end open source platform for machine learning. In affected versions TensorFlow and Keras can be tricked to perform arbitrary code execution when deserializing a Keras model from YAML format. The [implementation](https://github.com/tens…

    TensorFlow TensorFlow tensorflow tensorflow-cpu PyPI