KE
Product
Keras
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 2Low 0
Watch
Add Keras to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12481 | 9.8 | Jul 3 | Deserialization of Untrusted Data in keras-team/keras Affected: 3.14.0 |
| CVE-2025-1550 | 9.8 | Mar 11 | The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive Affected: 3.0.0 before 3.8.0 |
| CVE-2024-3660 | 9.8 | Apr 16 | A arbitrary code injection vulnerability in TensorFlow's Keras framework (<2.13) allows attackers to execute arbitrary code with the same permissions as the application using a… Affected: before 2.13.1 |
| CVE-2026-11816 | 8.1 | Jun 11 | Path Traversal in keras-team/keras Affected: before 3.14.0 |
| CVE-2026-1462 | 7.8 | Apr 13 | Safe Mode Bypass in keras-team/keras Affected: 3.13.0 |
| CVE-2025-8747 | 7.8 | Aug 11 | A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a… Affected: 3.0.0 through 3.10.0 |
| CVE-2026-1669 | 7.5 | Feb 11 | Arbitrary File Read in Keras via HDF5 External Datasets Affected: 3.0.0 through 3.13.1 |
| CVE-2026-0897 | 7.5 | Jan 15 | Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata Affected: 3.0.0 through 3.13.0 |
| CVE-2025-9906 | 7.3 | Sep 19 | The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True Affected: 3.0.0 before 3.11.0 |
| CVE-2025-9905 | 7.3 | Sep 19 | The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True Affected: 3.0.0 before 3.11.3 |
| CVE-2026-12482 | 6.5 | Jul 14 | Path Traversal via Symlink Name Validation Bypass in keras-team/keras Affected: 3.12.0 |
| CVE-2024-55459 | 6.5 | Jan 8 | An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file function Affected: 3.7.0 |
Showing 12