| Keras framework vulnerable to deserialization of untrusted dataCVE-2025-49655 · GHSA-CVHH-Q5G5-QPRPVersion ranges need review. |
keras |
PyPI |
Critical
|
Fix reported |
|
| Keras model loading is vulnerable to denial of service through HDF5 shape bombsCVE-2026-12570 · GHSA-74M6-M3XX-3VMJVersion ranges need review. |
kerasRed Hat OpenShift AI (RHOAI)/rhoai/odh-kserve-agent-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Keras has an untrusted deserialization vulnerabilityCVE-2026-1462 · GHSA-4F3F-G24H-FR8MVersion ranges need review. |
kerasRed Hat OpenShift AI (RHOAI)/rhoai/odh-modelmesh-runtime-adapter-rhel8 |
PyPIRed Hat |
High
|
Fix reported |
|
| Arbitrary Code Execution via Crafted Keras Config for Model LoadingCVE-2025-1550 · GHSA-48G7-3X6R-XFHPVersion ranges need review. |
keras |
PyPI |
High
|
Fix reported |
|
| Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight LoadingCVE-2026-1669 · GHSA-3M4Q-JMJ6-R34QVersion ranges need review. |
kerasRed Hat OpenShift AI (RHOAI)/rhoai/odh-kserve-agent-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| Keras is vulnerable to arbitrary local file loading and Server-Side Request ForgeryCVE-2025-12058 · GHSA-MQ84-HJQX-CWF2Version ranges need review. |
kerasRed Hat OpenShift AI (RHOAI)/rhoai/odh-kserve-agent-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file is loaded.CVE-2025-9905 · GHSA-36RR-WW3J-VRJVVersion ranges need review. |
kerasRed Hat OpenShift AI (RHOAI)/rhoai/odh-modelmesh-runtime-adapter-rhel8 |
PyPIRed Hat |
High
|
Fix reported |
|
| Keras is vulnerable to Deserialization of Untrusted DataCVE-2025-9906 · GHSA-36FQ-JGMW-4R9CVersion ranges need review. |
kerasRed Hat OpenShift AI (RHOAI)/rhoai/odh-modelmesh-runtime-adapter-rhel8 |
PyPIRed Hat |
High
|
Fix reported |
|
| Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionalityCVE-2025-8747 · GHSA-C9RC-MG46-23W3Version ranges need review. |
keras |
PyPI |
High
|
Fix reported |
|
| keras Path Traversal vulnerabilityCVE-2024-55459 · GHSA-CJGQ-5QMW-RCJ6Version ranges need review. |
keras |
PyPI |
Medium
|
No fix reported |
|
| Keras: HDF5 virtual datasets can disclose local filesCVE-2026-12480 · GHSA-26C4-7VV6-867JVersion ranges need review. |
kerasRed Hat OpenShift AI (RHOAI)/rhoai/odh-kserve-agent-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Keras: HDF5 links can disclose local file contentsCVE-2026-9335 · GHSA-M8WH-29WM-52MVVersion ranges need review. |
keras |
PyPI |
Medium
|
Fix reported |
|
| Keras: DiskIOStore permits path traversal through crafted layer namesCVE-2026-12479 · GHSA-GH82-F9X8-5FRXVersion ranges need review. |
kerasRed Hat OpenShift AI (RHOAI)/rhoai/odh-modelmesh-runtime-adapter-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Keras: Lambda deserialization can bypass safe mode and execute codeCVE-2026-12481 · GHSA-5GWJ-M78Q-7PQ3Version ranges need review. |
kerasRed Hat OpenShift AI (RHOAI)/rhoai/odh-modelmesh-runtime-adapter-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle dataCVE-2026-12484 · GHSA-V2W2-W228-C444Version ranges need review. |
kerasRed Hat OpenShift AI (RHOAI)/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| Keras: tar extraction permits symlink-based path traversalCVE-2026-12482 · GHSA-58HV-7753-XMFQVersion ranges need review. |
kerasRed Hat OpenShift AI (RHOAI)/rhoai/odh-kserve-agent-rhel9 |
PyPIRed Hat |
Low
|
Fix reported |
|
| Keras archive extraction utilities allow path traversal and arbitrary file writesCVE-2026-11816 · GHSA-HQP4-2352-XF5RVersion ranges need review. |
keras |
PyPI |
High
|
Fix reported |
|
| Keras Directory Traversal VulnerabilityCVE-2025-12060 · GHSA-HJQC-JX6G-RWP9Version ranges need review. |
keras |
PyPI |
High
|
Fix reported |
|
| Keras code injection vulnerabilityCVE-2024-3660 · GHSA-X4WF-678H-2PMQVersion ranges need review. |
keras |
PyPI |
Critical
|
Fix reported |
|
| Keras vulnerable to DoS via Malicious .keras Model (HDF5 Shape Bomb Causes Petabyte Allocation in KerasFileEditor)CVE-2026-0897 · GHSA-MGX6-5CF9-RR43Version ranges need review. |
kerasRed Hat OpenShift AI (RHOAI)/rhoai/odh-modelmesh-runtime-adapter-rhel8 |
PyPIRed Hat |
High
|
Fix reported |
|
