KE
Vendor
Keras
15
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-12482 | KE Keras Keras | 6.5 | Jul 14 | Path Traversal via Symlink Name Validation Bypass in keras-team/keras |
| CVE-2026-12481 | KE Keras Keras | 9.8 | Jul 3 | Deserialization of Untrusted Data in keras-team/keras |
| CVE-2026-11816 | KE Keras Keras | 8.1 | Jun 11 | Path Traversal in keras-team/keras |
| CVE-2026-1462 | KE Keras Keras | 7.8 | Apr 13 | Safe Mode Bypass in keras-team/keras |
| CVE-2026-1669 | KE Keras Keras | 7.5 | Feb 11 | Arbitrary File Read in Keras via HDF5 External Datasets |
| CVE-2026-0897 | KE Keras Keras | 7.5 | Jan 15 | Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata |
| CVE-2025-12060 | KE Keras Keras | 8.9 | Oct 30 | Keras keras.utils.get_file Utility Path Traversal Vulnerability |
| CVE-2025-12058 | KE Keras Keras | 5.9 | Oct 29 | Vulnerability in Keras Model.load_model Leading to Arbitrary Local File Loading and SSRF |
| CVE-2025-49655 | KE Keras Keras | 9.8 | Oct 17 | Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file… |
| CVE-2025-9905 | KE Keras Keras | 7.3 | Sep 19 | Arbitary Code execution in Keras load_model() |
| CVE-2025-9906 | KE Keras Keras | 7.3 | Sep 19 | Arbitrary Code execution in Keras Safe Mode |
| CVE-2025-8747 | KE Keras Keras | 7.8 | Aug 11 | A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a… |
| CVE-2025-1550 | KE Keras Keras | 9.8 | Mar 11 | The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive |
| CVE-2024-55459 | KE Keras Keras | 6.5 | Jan 8 | An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file function |
| CVE-2024-3660 | KE Keras Keras | 9.8 | Apr 16 | A arbitrary code injection vulnerability in TensorFlow's Keras framework (<2.13) allows attackers to execute arbitrary code with the same permissions as the application using a… |