Keras

This hub aggregates every CVE we track for Keras, a product in the ai ml space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 10 most recently published vulnerabilities affecting Keras.

• CVE-2026-1669Arbitrary File Read in Keras via HDF5 External Datasets7.5Feb 11, 2026
• CVE-2026-0897Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata7.5Jan 15, 2026
• CVE-2025-12638Path Traversal Vulnerability in keras-team/keras via Tar Archive Extraction in keras.utils.get_file()8.0Nov 28, 2025
• CVE-2025-49655Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a Torch...9.8Oct 17, 2025
• CVE-2025-9905Arbitary Code execution in Keras load_model()7.3Sep 19, 2025
• CVE-2025-9906Arbitrary Code execution in Keras Safe Mode7.3Sep 19, 2025
• CVE-2025-8747Keras safe_mode bypass allows arbitrary code execution when loading a malicious model.7.8Aug 11, 2025
• CVE-2025-1550Arbitrary Code Execution via Crafted Keras Config for Model Loading9.8Mar 11, 2025
• CVE-2024-55459An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file function.6.5Jan 8, 2025
• CVE-2024-3660Arbitrary code injection vulnerability in Keras framework < 2.139.8Apr 16, 2024