KE
Product
keras-team/keras
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 5Low 0
Watch
Add keras-team/keras to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12481 | 9.8 | Jul 3 | Deserialization of Untrusted Data in keras-team/keras Affected: through latest |
| CVE-2026-11816 | 8.1 | Jun 11 | Path Traversal in keras-team/keras Affected: before 3.14.0 |
| CVE-2025-12638 | 8.0 | Nov 28 | Path Traversal Vulnerability in keras-team/keras via Tar Archive Extraction in keras.utils.get_file() Affected: through latest |
| CVE-2026-12484 | 7.8 | Jul 19 | Unsafe Deserialization in keras.layers.TorchModuleWrapper.from_config Affected: through latest |
| CVE-2026-1462 | 7.8 | Apr 13 | Safe Mode Bypass in keras-team/keras Affected: before 3.13.2 |
| CVE-2026-9335 | 6.5 | Aug 2 | Improper Handling of HDF5 ExternalLinks in keras-team/keras Affected: before 3.12.3, 3.15.0 |
| CVE-2026-12482 | 6.5 | Jul 14 | Path Traversal via Symlink Name Validation Bypass in keras-team/keras Affected: through latest |
| CVE-2026-12479 | 6.1 | Jun 22 | Path Traversal in keras-team/keras Affected: through latest |
| CVE-2026-12570 | 5.5 | Aug 10 | Denial of Service via HDF5 Shape Bomb in keras.models.load_model() in keras-team/keras Affected: before 3.12.3, 3.15.0 |
| CVE-2026-12480 | 5.5 | Jul 1 | Arbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/keras Affected: before 3.12.2, 3.14.1 |
Showing 10
