keras vulnerabilities (PyPI)
20 vulnerabilities.
-
kerasPyPI Denial of Service via HDF5 Shape Bomb in keras.models.load_model() in keras-team/keras 5.5 Medium -
kerasPyPI Improper Handling of HDF5 ExternalLinks in keras-team/keras 6.5 Medium -
kerasPyPI Unsafe Deserialization in keras.layers.TorchModuleWrapper.from_config 7.8 High -
kerasPyPI Path Traversal via Symlink Name Validation Bypass in keras-team/keras 3.1 Low -
kerasPyPI Deserialization of Untrusted Data in keras-team/keras 8.8 High -
kerasPyPI Arbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/keras 5.5 Medium -
kerasPyPI Path Traversal in keras-team/keras 6.1 Medium -
kerasPyPI Path Traversal in keras-team/keras 8.1 High -
kerasPyPI Safe Mode Bypass in keras-team/keras 8.8 High -
kerasPyPI Arbitrary File Read in Keras via HDF5 External Datasets 7.1 High -
kerasPyPI Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata 7.1 High -
kerasPyPI Keras keras.utils.get_file Utility Path Traversal Vulnerability 8.9 High -
kerasPyPI Vulnerability in Keras Model.load_model Leading to Arbitrary Local File Loading and SSRF 5.9 Medium -
kerasPyPI Keras framework vulnerable to deserialization of untrusted data 9.8 Critical -
kerasPyPI Arbitary Code execution in Keras load_model() 7.3 High -
kerasPyPI Arbitrary Code execution in Keras Safe Mode 8.6 High -
kerasPyPI Keras safe_mode bypass allows arbitrary code execution when loading a malicious model. 8.6 High -
kerasPyPI Arbitrary Code Execution via Crafted Keras Config for Model Loading 7.3 High -
kerasPyPI keras Path Traversal vulnerability 6.5 Medium -
kerasPyPI Arbitrary code injection vulnerability in Keras framework < 2.13 9.8 Critical