Vulnerabilidades em Keras-team
11 resultadosAnálise Vexday
Keras-team apresenta baixo volume de vulnerabilidades registradas (2 CVEs), com nenhuma sob exploração ativa no momento. A fraqueza predominante é desserialização insegura (CWE-502), um vetor clássico de comprometimento remoto, mas sem atividade de ataque confirmada ou descobertas recentes que ampliem o risco imediato.
CVE-2025-12638HIGHPath Traversal Vulnerability in keras-team/keras via Tar Archive Extraction in keras.utils.get_file()EPSS 0.7%CVE-2026-9335MEDIUMImproper Handling of HDF5 ExternalLinks in keras-team/kerasEPSS 0.6%CVE-2026-11816HIGHPath Traversal in keras-team/kerasEPSS 0.6%CVE-2026-12481HIGHDeserialization of Untrusted Data in keras-team/kerasEPSS 0.5%CVE-2026-1462HIGHSafe Mode Bypass in keras-team/kerasEPSS 0.4%CVE-2026-12479MEDIUMPath Traversal in keras-team/kerasEPSS 0.4%CVE-2026-12482LOWPath Traversal via Symlink Name Validation Bypass in keras-team/kerasEPSS 0.2%CVE-2026-12484HIGHUnsafe Deserialization in keras.layers.TorchModuleWrapper.from_configEPSS 0.2%CVE-2025-9905HIGHArbitary Code execution in Keras load_model()EPSS 0.2%CVE-2025-9906HIGHArbitrary Code execution in Keras Safe ModeEPSS 0.2%CVE-2026-12480MEDIUMArbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/kerasEPSS 0.1%