Advisoriesby Ibis
Keras security advisories
20 advisories · 7 critical or high in 12 months · latest Aug 10
20 advisories
Keras model loading is vulnerable to denial of service through HDF5 shape bombsCVE-2026-12570fixed in 3.15.0Keras: HDF5 links can disclose local file contentsCVE-2026-9335fixed in 3.12.3 +1Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle dataCVE-2026-12484fixed in 3.12.3 +1Keras: tar extraction permits symlink-based path traversalCVE-2026-12482fixed in 3.12.3 +1Keras: Lambda deserialization can bypass safe mode and execute codeCVE-2026-12481fixed in 3.12.3 +1Keras: HDF5 virtual datasets can disclose local filesCVE-2026-12480fixed in 3.12.3 +1Keras: DiskIOStore permits path traversal through crafted layer namesCVE-2026-12479fixed in 3.12.3 +1Keras archive extraction utilities allow path traversal and arbitrary file writesCVE-2026-11816fixed in 3.14.0Keras: resource exhaustionCVE-2026-0897fixed in 3.12.1 +1Keras has an untrusted deserialization vulnerabilityCVE-2026-1462fixed in 3.13.2Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight LoadingCVE-2026-1669fixed in 3.12.1 +1Keras Directory Traversal VulnerabilityCVE-2025-12060fixed in 3.12.0Keras is vulnerable to arbitrary local file loading and Server-Side Request ForgeryCVE-2025-12058fixed in 3.12.0Keras framework vulnerable to deserialization of untrusted dataCVE-2025-49655fixed in 3.11.3Keras: code executionCVE-2025-9905fixed in 3.11.3Keras is vulnerable to Deserialization of Untrusted DataCVE-2025-9906fixed in 3.11.0Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionalityCVE-2025-8747fixed in 3.11.0Arbitrary Code Execution via Crafted Keras Config for Model LoadingCVE-2025-1550fixed in 3.9.0keras Path Traversal vulnerabilityCVE-2024-55459no fix yetKeras code injection vulnerabilityCVE-2024-3660fixed in 2.13.1rc0