Keras vulnerabilities

2 known vulnerabilities in Keras from Keras-team. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Keras: Deserialization of Untrusted Data

  CVE-2025-9906Sep 19, 2025Keras-team

  The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True. One can create a specially crafted .keras model archive that, when loaded via Model.load_model, will trigger arbitrary code to be executed. This i

• 7.3 High severity

  Keras: Improper Control of Dynamically-Managed Code Resources

  CVE-2025-9905Sep 19, 2025Keras-team

  The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True. One can create a specially crafted .h5/.hdf5 model archive that, when loaded via Model.load_model, will trigger arbitrary code to be executed. Thi