HIGH 7.5

PYSEC-2026-73

Details

Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory exhaustion and a crash of the Python interpreter via a crafted .keras archive containing a valid model.weights.h5 file whose dataset declares an extremely large shape.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / keras

Introduced in: 3.0.0 Fixed in: 3.13.1

Fix pip install --upgrade 'keras>=3.13.1'

References

https://github.com/keras-team/keras/pull/21880 [FIX]