Multi-backend Keras
[email protected] has vulnerabilities — update to latest
| Severity | ID | Summary | Fixed in |
|---|---|---|---|
| high | CVE-2025-8747 | A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted `.keras` model archive. | — |
| high | CVE-2025-9906 | The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True. One can create a specially crafted .keras model archive that, when loaded via Model.load_model, will trigger arbitrary code to be executed. This is achieved by crafting a special config.json (a file within the .keras archive) that will invoke keras.config.enable_unsafe_deserialization() to disable safe mode. Once safe mode is disable, one can use the Lambda layer feature of keras, w | — |
Get this data programmatically — free, no authentication.
curl https://depscope.dev/api/check/pypi/kerasLast updated · 2026-05-07T21:43:32.737856Z