Advisoriesby IbisKerasGHSA-cjgq-5qmw-rcj6
keras Path Traversal vulnerability
No fix yet
An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file function.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| keras PyPI | <= 3.7.0 | No fix yet |
Details and references
- CVSS 4.0
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-22
- Also known as
- CVE-2024-55459, PYSEC-2025-121
- nvd.nist.gov/vuln/detail/CVE-2024-55459
- github.com/keras-team/keras
- github.com/keras-team/keras/blob/8f5592bcb61ff48c96560c8923e482db1076b54a/keras/src/utils/file_utils.py#L115
- github.com/pypa/advisory-database/tree/main/vulns/keras/PYSEC-2025-121.yaml
- keras.io
- river-bicycle-f1e.notion.site/Arbitrary-File-Write-Vulnerability-in-get_file-function-11888e31952580179224e50892976d32
More Keras advisories
All Keras
Keras framework vulnerable to deserialization of untrusted dataCVE-2025-49655fixed in 3.11.3Keras: code executionCVE-2025-9905fixed in 3.11.3Keras is vulnerable to Deserialization of Untrusted DataCVE-2025-9906fixed in 3.11.0Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionalityCVE-2025-8747fixed in 3.11.0Arbitrary Code Execution via Crafted Keras Config for Model LoadingCVE-2025-1550fixed in 3.9.0Keras code injection vulnerabilityCVE-2024-3660fixed in 2.13.1rc0