Vulnerabilities in keras-team

12 results

Vexday analysis

A Keras registra 8 vulnerabilidades na base, com 6 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Nenhuma vulnerabilidade está sob ataque ativo (KEV) e não há críticas por CVSS, reduzindo o risco imediato. A fraqueza dominante é Path Traversal (CWE-22), sugerindo problemas de validação de caminho que demandam atenção em avaliações de impacto específicas.

CVE-2025-12638HIGHPath Traversal Vulnerability in keras-team/keras via Tar Archive Extraction in keras.utils.get_file()EPSS 0.7%CVE-2026-9335MEDIUMImproper Handling of HDF5 ExternalLinks in keras-team/kerasEPSS 0.6%CVE-2026-11816HIGHPath Traversal in keras-team/kerasEPSS 0.6%CVE-2026-12481HIGHDeserialization of Untrusted Data in keras-team/kerasEPSS 0.5%CVE-2026-1462HIGHSafe Mode Bypass in keras-team/kerasEPSS 0.4%CVE-2026-12479MEDIUMPath Traversal in keras-team/kerasEPSS 0.4%CVE-2026-12482LOWPath Traversal via Symlink Name Validation Bypass in keras-team/kerasEPSS 0.2%CVE-2026-12484HIGHUnsafe Deserialization in keras.layers.TorchModuleWrapper.from_configEPSS 0.2%CVE-2025-9905HIGHArbitary Code execution in Keras load_model()EPSS 0.2%CVE-2025-9906HIGHArbitrary Code execution in Keras Safe ModeEPSS 0.2%CVE-2026-12570MEDIUMDenial of Service via HDF5 Shape Bomb in keras.models.load_model() in keras-team/kerasEPSS 0.1%CVE-2026-12480MEDIUMArbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/kerasEPSS 0.1%