PyPI / keras

Keras is vulnerable to Deserialization of Untrusted Data

Modified: 5/29/2026

The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file is loaded.

Modified: 5/20/2026

Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight Loading

Modified: 2/22/2026

Arbitrary Code Execution via Crafted Keras Config for Model Loading

Modified: 5/20/2026

Keras has an untrusted deserialization vulnerability

Modified: 5/18/2026

Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality

Modified: 5/29/2026

keras Path Traversal vulnerability

Modified: 5/20/2026

Keras framework vulnerable to deserialization of untrusted data

Modified: 10/17/2025

Keras Directory Traversal Vulnerability

Modified: 12/2/2025

Keras vulnerable to DoS via Malicious .keras Model (HDF5 Shape Bomb Causes Petabyte Allocation in KerasFileEditor)

Modified: 5/20/2026

Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery

Modified: 3/12/2026

Keras code injection vulnerability

Modified: 8/2/2024

Modified: 5/21/2026

Modified: 5/20/2026

Modified: 5/20/2026

Modified: 5/19/2026

Modified: 5/19/2026

Modified: 5/20/2026