VDB
EN
MEDIUM 5.5

GHSA-26c4-7vv6-867j

Keras: HDF5 virtual datasets can disclose local files

빠른 조치

GHSA-26c4-7vv6-867j — keras: 아래 명령으로 수정 버전으로 올리세요. 

pip install --upgrade 'keras>=3.12.3'

상세

Keras versions up to and including 3.13.2 are vulnerable to an arbitrary HDF5 file read due to an incomplete fix for CVE-2026-1669. The vulnerability resides in the `H5IOStore._verify_dataset()` and `file_editor.py` methods, which fail to check the `dataset.is_virtual` property of HDF5 datasets. This allows an attacker to craft a malicious `.keras` model archive or `.h5` weights file containing a Virtual Dataset (VDS) that references external HDF5 files on the victim's filesystem. When the victim loads the model using `keras.models.load_model()` or `keras.saving.load_model()`, the external file is transparently read, leading to potential information disclosure. Fixed in versions 3.12.3 and 3.15.0.

이 버전이 영향받나요?

사용 중인 패키지 버전을 입력하면 즉시 평가합니다.

영향 패키지

PyPI / keras
최초 영향 버전: 0 수정 버전: 3.12.3
수정 pip install --upgrade 'keras>=3.12.3'
PyPI / keras
최초 영향 버전: 3.13.0 수정 버전: 3.15.0
수정 pip install --upgrade 'keras>=3.15.0'

참고