Keras-team

Products

Exploited and recent CVEs

• CVE-2026-12570 Medium 5.5 Denial of Service via HDF5 Shape Bomb in keras.models.load_model() in keras-team/keras 0.2%
• CVE-2026-9335 Medium 6.5 Improper Handling of HDF5 ExternalLinks in keras-team/keras 0.8%
• CVE-2026-12484 High 7.8 Unsafe Deserialization in keras.layers.TorchModuleWrapper.from_config 0.3%
• CVE-2026-12482 Low 3.1 Path Traversal via Symlink Name Validation Bypass in keras-team/keras 0.3%
• CVE-2026-12481 High 8.8 Deserialization of Untrusted Data in keras-team/keras 0.7%
• CVE-2026-12480 Medium 5.5 Arbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/keras 0.2%
• CVE-2026-12479 Medium 6.1 Path Traversal in keras-team/keras 0.4%
• CVE-2026-11816 High 8.1 Path Traversal in keras-team/keras 0.6%
• CVE-2026-1462 High 7.8 Safe Mode Bypass in keras-team/keras 0.4%
• CVE-2025-12638 High 8.0 Path Traversal Vulnerability in keras-team/keras via Tar Archive Extraction in keras.utils.get_file() 0.7%
• CVE-2025-9905 High 7.3 Arbitary Code execution in Keras load_model() 0.2%
• CVE-2025-9906 High 8.6 Arbitrary Code execution in Keras Safe Mode 0.2%