KE
Product
Keras
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 8Medium 3Low 0
Watch
Add Keras to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12481 | 9.8 | Jul 3 | Deserialization of Untrusted Data in keras-team/keras Affected: 3.14.0 |
| CVE-2025-49655 | 9.8 | Oct 17 | Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file… Affected: 3.11.0 before 3.11.3 |
| CVE-2025-1550 | 9.8 | Mar 11 | The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive Affected: 3.0.0 before 3.8.0 |
| CVE-2024-3660 | 9.8 | Apr 16 | A arbitrary code injection vulnerability in TensorFlow's Keras framework (<2.13) allows attackers to execute arbitrary code with the same permissions as the application using a… Affected: before 2.13.1 |
Showing 4
