Keras (Google) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-02-11. Vendor: Google.

CVEs of Keras

• CVE-2026-1669 - CVSS 7.5 (high), 2026-02-11: Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remote…
• CVE-2026-0897 - CVSS 7.6 (high), 2026-01-15: Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a…
• CVE-2025-8747 - CVSS 8.6 (high), 2025-08-11: A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code…
• CVE-2025-1550 - CVSS 9.8 (critical), 2025-03-11: The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive. By…