Keras-team vulnerabilities

CVEs per yearBy the year they were published

1. 20253
2. 20269

Newest CVEs

• CVE-2026-12570

  Denial of Service via HDF5 Shape Bomb in keras.models.load_model() in keras-team/keras

  keras-team · keras-team/keras

  Medium5.5
• CVE-2026-9335

  Improper Handling of HDF5 ExternalLinks in keras-team/keras

  keras-team · keras-team/keras

  Medium6.5
• CVE-2026-12484

  Unsafe Deserialization in keras.layers.TorchModuleWrapper.from_config

  keras-team · keras-team/keras

  High7.8
• CVE-2026-12482

  Path Traversal via Symlink Name Validation Bypass in keras-team/keras

  keras-team · keras-team/keras

  Low3.1
• CVE-2026-12481

  Deserialization of Untrusted Data in keras-team/keras

  keras-team · keras-team/keras

  High8.8
• CVE-2026-12480

  Arbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/keras

  keras-team · keras-team/keras

  Medium5.5
• CVE-2026-12479

  Path Traversal in keras-team/keras

  keras-team · keras-team/keras

  Medium6.1
• CVE-2026-11816

  Path Traversal in keras-team/keras

  keras-team · keras-team/keras

  High8.1
• CVE-2026-1462

  Safe Mode Bypass in keras-team/keras

  keras-team · keras-team/keras

  High8.8
• CVE-2025-12638

  Path Traversal Vulnerability in keras-team/keras via Tar Archive Extraction in keras.utils.get_file()

  keras-team · keras-team/keras

  High8.0