MEDIUM 6.5
PYSEC-2025-121
Details
An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file function.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI / keras
Introduced in:
0 No fixed version published yet for keras (pip). Pin to a known-safe version or switch to an alternative.