pkg:PyPI/keras

All known vulnerabilities

• CRITICAL9.8CVE-2025-12060Keras Directory Traversal Vulnerability
  from 0, < 3.12.0
• CRITICAL9.8CVE-2025-12060Keras Directory Traversal Vulnerability
  from 0, < 3.12.0
• CRITICAL9.8CVE-2025-49655Keras framework vulnerable to deserialization of untrusted data
  >= 3.11.0, < 3.11.3
• CRITICAL9.8Arbitrary Code Execution via Crafted Keras Config for Model Loading
  >= 3.0.0, < 3.9.0
• CRITICAL9.8Arbitrary Code Execution via Crafted Keras Config for Model Loading
  >= 3.0.0, < 3.8.0
• CRITICAL9.8Keras code injection vulnerability
  from 0, < 2.13.1rc0
• HIGH8.8Keras has an untrusted deserialization vulnerability
  from 0, < 3.13.2
• HIGH8.8Keras has an untrusted deserialization vulnerability
  from 0, < 3.13.2
• HIGH8.8Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality
  >= 3.0.0, < 3.11.0
• HIGH8.8Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality
• HIGH8.1Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in `keras/src/utils/fil…
  from 0, < 3.14.0
• HIGH7.5Duplicate Advisory: Google Keras Allocates Resources Without Limits or Throttling in the HDF5 weight loading component
  >= 3.0.0, < 3.12.1
• HIGH7.5Duplicate Advisory: Google Keras Allocates Resources Without Limits or Throttling in the HDF5 weight loading component
  >= 3.0.0, < 3.12.1
• HIGH7.5Duplicate Advisory: Google Keras Allocates Resources Without Limits or Throttling in the HDF5 weight loading component
  >= 3.0.0, < 3.13.1
• HIGH7.3The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file is loaded.
  >= 3.0.0, < 3.11.3
• HIGH7.3The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file is loaded.
  >= 3.0.0, < 3.11.3
• HIGH7.3Keras is vulnerable to Deserialization of Untrusted Data
  from 0, < 3.11.0
• HIGH7.1Duplicate Advisory: Keras vulnerable to arbitrary file read in the model loading mechanism (HDF5 integration)
  >= 3.13.0, < 3.13.2
• HIGH7.1Duplicate Advisory: Keras vulnerable to arbitrary file read in the model loading mechanism (HDF5 integration)
  >= 3.0.0, < 3.12.1, >= 3.13.0, < 3.13.2
• MEDIUM6.5keras Path Traversal vulnerability
  from 0, <= 3.7.0
• MEDIUM6.5keras Path Traversal vulnerability
  from 0, <= 3.7.0
• —Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery
  from 0, < 3.12.0
• —Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery
  from 0, < 3.12.0