Skip to contentKeras-team Keras vulnerabilities
- keras-team keras-team/kerasDenial of Service via HDF5 Shape Bomb in keras.models.load_model() in keras-team/kerasCVE-2026-12570Fix available5.5 Medium
- keras-team keras-team/kerasImproper Handling of HDF5 ExternalLinks in keras-team/kerasCVE-2026-9335Public exploitFix available6.5 Medium
- keras-team keras-team/kerasUnsafe Deserialization in keras.layers.TorchModuleWrapper.from_configCVE-2026-12484Fix available7.8 High
- keras, keras-team keras-team/keras +1 morePath Traversal via Symlink Name Validation Bypass in keras-team/kerasCVE-2026-12482Fix available3.1 Low
- keras, keras-team keras-team/keras +1 moreDeserialization of Untrusted Data in keras-team/kerasCVE-2026-12481Fix available8.8 High
- keras-team keras-team/kerasArbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/kerasCVE-2026-12480Fix available5.5 Medium
- keras-team keras-team/kerasPath Traversal in keras-team/kerasCVE-2026-12479Fix available6.1 Medium
- keras, keras-team keras-team/keras, red hat openshift ai (rhoai) +1 more +3 morePath Traversal in keras-team/kerasCVE-2026-11816Fix available8.1 High
- keras, keras-team keras-team/keras, red hat openshift ai (rhoai) +3 more +5 moreSafe Mode Bypass in keras-team/kerasCVE-2026-1462Fix available8.8 High
- keras-team keras-team/kerasPath Traversal Vulnerability in keras-team/keras via Tar Archive Extraction in keras.utils.get_file()CVE-2025-12638Fix available8.0 High
- google kerasArbitary Code execution in Keras load_model()CVE-2025-9905Fix available7.3 High
- google kerasArbitrary Code execution in Keras Safe ModeCVE-2025-9906Fix available8.6 High