Keras vulnerabilities

Products

• Keras 15

Newest

• keras, keras-team keras-team/keras +1 more Path Traversal via Symlink Name Validation Bypass in keras-team/keras CVE-2026-12482 Fix available 3.1 LowJuly 14, 2026
• keras, keras-team keras-team/keras +1 more Deserialization of Untrusted Data in keras-team/keras CVE-2026-12481 Fix available 8.8 HighJuly 3, 2026
• keras, keras-team keras-team/keras, red hat openshift ai (rhoai) +1 more +3 more Path Traversal in keras-team/keras CVE-2026-11816 Fix available 8.1 HighJune 11, 2026
• keras, keras-team keras-team/keras, red hat openshift ai (rhoai) +3 more +5 more Safe Mode Bypass in keras-team/keras CVE-2026-1462 Fix available 8.8 HighApril 13, 2026
• google keras, red hat openshift ai (rhoai) +1 more Arbitrary File Read in Keras via HDF5 External Datasets CVE-2026-1669 Fix available 7.1 HighFebruary 11, 2026
• google keras, red hat openshift ai (rhoai), openshift ai 2.25 +2 more +4 more Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata CVE-2026-0897 Public exploitFix available 7.1 HighJanuary 15, 2026
• google keras Keras keras.utils.get_file Utility Path Traversal Vulnerability CVE-2025-12060 Fix available 8.9 HighOctober 30, 2025
• google keras Vulnerability in Keras Model.load_model Leading to Arbitrary Local File Loading and SSRF CVE-2025-12058 Fix available 5.9 MediumOctober 29, 2025
• google keras Keras framework vulnerable to deserialization of untrusted data CVE-2025-49655 Fix available 9.8 CriticalOctober 17, 2025
• google keras Arbitary Code execution in Keras load_model() CVE-2025-9905 Fix available 7.3 HighSeptember 19, 2025
• google keras Arbitrary Code execution in Keras Safe Mode CVE-2025-9906 Fix available 8.6 HighSeptember 19, 2025
• google keras Keras safe_mode bypass allows arbitrary code execution when loading a malicious model. CVE-2025-8747 Fix available 8.6 HighAugust 11, 2025
• google keras Arbitrary Code Execution via Crafted Keras Config for Model Loading CVE-2025-1550 Public exploitFix available 7.3 HighMarch 11, 2025
• keras keras Path Traversal vulnerability CVE-2024-55459 6.5 MediumJanuary 8, 2025
• google keras, tensorflow +1 more Arbitrary code injection vulnerability in Keras framework < 2.13 CVE-2024-3660 Public exploitFix available 9.8 CriticalApril 16, 2024