Keras-team vulnerabilities

Products

• Keras-team/keras 10
• Keras 2

Newest

• keras-team keras-team/keras Denial of Service via HDF5 Shape Bomb in keras.models.load_model() in keras-team/keras CVE-2026-12570 Fix available 5.5 MediumAugust 10, 2026
• keras-team keras-team/keras Improper Handling of HDF5 ExternalLinks in keras-team/keras CVE-2026-9335 Public exploitFix available 6.5 MediumAugust 2, 2026
• keras-team keras-team/keras Unsafe Deserialization in keras.layers.TorchModuleWrapper.from_config CVE-2026-12484 Fix available 7.8 HighJuly 19, 2026
• keras, keras-team keras-team/keras +1 more Path Traversal via Symlink Name Validation Bypass in keras-team/keras CVE-2026-12482 Fix available 3.1 LowJuly 14, 2026
• keras, keras-team keras-team/keras +1 more Deserialization of Untrusted Data in keras-team/keras CVE-2026-12481 Fix available 8.8 HighJuly 3, 2026
• keras-team keras-team/keras Arbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/keras CVE-2026-12480 Fix available 5.5 MediumJuly 1, 2026
• keras-team keras-team/keras Path Traversal in keras-team/keras CVE-2026-12479 Fix available 6.1 MediumJune 22, 2026
• keras, keras-team keras-team/keras, red hat openshift ai (rhoai) +1 more +3 more Path Traversal in keras-team/keras CVE-2026-11816 Fix available 8.1 HighJune 11, 2026
• keras, keras-team keras-team/keras, red hat openshift ai (rhoai) +3 more +5 more Safe Mode Bypass in keras-team/keras CVE-2026-1462 Fix available 8.8 HighApril 13, 2026
• keras-team keras-team/keras Path Traversal Vulnerability in keras-team/keras via Tar Archive Extraction in keras.utils.get_file() CVE-2025-12638 Fix available 8.0 HighNovember 28, 2025
• google keras Arbitary Code execution in Keras load_model() CVE-2025-9905 Fix available 7.3 HighSeptember 19, 2025
• google keras Arbitrary Code execution in Keras Safe Mode CVE-2025-9906 Fix available 8.6 HighSeptember 19, 2025