Keras

Products

ProductCVEsExploitedLatest
Keras3–Oct 30, 2025

Exploited and recent CVEs

  • CVE-2025-12060 High 8.9 Keras keras.utils.get_file Utility Path Traversal Vulnerability 0.6%
  • CVE-2025-12058 Medium 5.9 Vulnerability in Keras Model.load_model Leading to Arbitrary Local File Loading and SSRF 0.2%
  • CVE-2025-49655 Critical 9.8 Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModu 0.8%