keras vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-9335Mediumkeras: Keras: HDF5 links can disclose local file contents CVE-2026-12484Highkeras: Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data CVE-2026-12482Lowkeras: Keras: tar extraction permits symlink-based path traversal CVE-2026-12481Highkeras: Keras: Lambda deserialization can bypass safe mode and execute code CVE-2026-12480Mediumkeras: Keras: HDF5 virtual datasets can disclose local files CVE-2026-12479Mediumkeras: Keras: DiskIOStore permits path traversal through crafted layer names CVE-2026-11816Highkeras: Keras archive extraction utilities allow path traversal and arbitrary file writes CVE-2026-0897Highkeras: Keras vulnerable to DoS via Malicious .keras Model (HDF5 Shape Bomb Causes Petabyte Allocation in KerasFileEditor)CVE-2026-1462Highkeras: Keras has an untrusted deserialization vulnerability CVE-2026-1669Highkeras: Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight Loading CVE-2025-12060Highkeras: Keras Directory Traversal Vulnerability CVE-2025-12058Mediumkeras: Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery CVE-2025-49655Criticalkeras: Keras framework vulnerable to deserialization of untrusted data CVE-2025-9905Highkeras: The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file is…CVE-2025-9906Highkeras: Keras is vulnerable to Deserialization of Untrusted Data CVE-2025-8747Highkeras: Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality CVE-2025-1550Highkeras: Arbitrary Code Execution via Crafted Keras Config for Model Loading CVE-2024-55459Mediumkeras: keras Path Traversal vulnerability CVE-2024-3660Criticalkeras: Keras code injection vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo