KE
Product
Keras
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 8Medium 3Low 0
Watch
Add Keras to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12481 | 9.8 | Jul 3 | Deserialization of Untrusted Data in keras-team/keras Affected: 3.14.0 |
| CVE-2025-49655 | 9.8 | Oct 17 | Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file… Affected: 3.11.0 before 3.11.3 |
| CVE-2025-1550 | 9.8 | Mar 11 | Arbitrary Code Execution via Crafted Keras Config for Model Loading Affected: 3.0.0 before 3.8.0 |
| CVE-2024-3660 | 9.8 | Apr 16 | A arbitrary code injection vulnerability in TensorFlow's Keras framework (<2.13) allows attackers to execute arbitrary code with the same permissions as the application using a… Affected: before 2.13.1 |
| CVE-2025-12060 | 8.9 | Oct 30 | Keras keras.utils.get_file Utility Path Traversal Vulnerability Affected: 3.0.0 through 3.11.3 |
| CVE-2026-11816 | 8.1 | Jun 11 | Path Traversal in keras-team/keras Affected: before 3.14.0 |
| CVE-2026-1462 | 7.8 | Apr 13 | Safe Mode Bypass in keras-team/keras Affected: 3.13.0 |
| CVE-2025-8747 | 7.8 | Aug 11 | Keras safe_mode bypass allows arbitrary code execution when loading a malicious model. Affected: 3.0.0 through 3.10.0 |
| CVE-2026-1669 | 7.5 | Feb 11 | Arbitrary File Read in Keras via HDF5 External Datasets Affected: 3.0.0 through 3.13.1 |
| CVE-2026-0897 | 7.5 | Jan 15 | Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata Affected: 3.0.0 through 3.13.0 |
| CVE-2025-9905 | 7.3 | Sep 19 | Arbitary Code execution in Keras load_model() Affected: 3.0.0 before 3.11.3 |
| CVE-2025-9906 | 7.3 | Sep 19 | Arbitrary Code execution in Keras Safe Mode Affected: 3.0.0 before 3.11.0 |
| CVE-2026-12482 | 6.5 | Jul 14 | Path Traversal via Symlink Name Validation Bypass in keras-team/keras Affected: 3.12.0 |
| CVE-2024-55459 | 6.5 | Jan 8 | An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file function Affected: 3.7.0 |
| CVE-2025-12058 | 5.9 | Oct 29 | Vulnerability in Keras Model.load_model Leading to Arbitrary Local File Loading and SSRF Affected: before 3.12.0 |
Showing 15