KE
Product
Keras
by Keras · last CVE Jul 14, 2026
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 8Medium 3Low 0
Watch

Add Keras to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-12481
9.8
1%
Jul 3
Deserialization of Untrusted Data in keras-team/keras
Affected: 3.14.0
CVE-2025-49655
9.8
1%
Oct 17
Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file…
Affected: 3.11.0 before 3.11.3
CVE-2025-1550
9.8
3%
Mar 11
The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive
Affected: 3.0.0 before 3.8.0
CVE-2024-3660
9.8
2%
Apr 16
A arbitrary code injection vulnerability in TensorFlow's Keras framework (<2.13) allows attackers to execute arbitrary code with the same permissions as the application using a…
Affected: before 2.13.1
Showing 4