Keras kayıtları
keras üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %91,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-502 Deserialization of Untrusted Data4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-913 Improper Control of Dynamically-Managed Code Resources1
- CWE-73 External Control of File Name or Path1
- CWE-494 Download of Code Without Integrity Check1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2024-3660Kavram kanıtı | Arbitrary code injection vulnerability in Keras framework < 2.13keras · keras · CWE-94 | Kritik9,8 | — | %1,7 | 16 Nis 2024 |
39İzleyin | CVE-2026-12481İstismar yok | Deserialization of Untrusted Data in keras-team/keraskeras · keras · CWE-502 | Kritik9,8 | — | %0,7 | 3 Tem 2026 |
34İzleyin | CVE-2025-9906İstismar yok | Arbitrary Code execution in Keras Safe Modekeras · keras · CWE-502 | Yüksek8,6 | — | %0,2 | 19 Eyl 2025 |
34İzleyin | CVE-2025-8747İstismar yok | Keras safe_mode bypass allows arbitrary code execution when loading a malicious model.keras · keras · CWE-502 | Yüksek8,6 | — | %0,1 | 11 Ağu 2025 |
32İzleyin | CVE-2026-11816İstismar yok | Path Traversal in keras-team/keraskeras · keras · CWE-22 | Yüksek8,1 | — | %0,6 | 11 Haz 2026 |
31İzleyin | CVE-2026-1462İstismar yok | Safe Mode Bypass in keras-team/keraskeras · keras · CWE-502 | Yüksek7,8 | — | %0,4 | 13 Nis 2026 |
30İzleyin | CVE-2025-1550Kavram kanıtı | Arbitrary Code Execution via Crafted Keras Config for Model Loadingkeras · keras · CWE-94 | Yüksek7,3 | — | %2,6 | 11 Mar 2025 |
29İzleyin | CVE-2025-9905İstismar yok | Arbitary Code execution in Keras load_model()keras · keras · CWE-913 | Yüksek7,3 | — | %0,2 | 19 Eyl 2025 |
28İzleyin | CVE-2026-0897Kavram kanıtı | Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadatakeras · keras · CWE-770 | Yüksek7,1 | — | %0,3 | 15 Oca 2026 |
28İzleyin | CVE-2026-1669İstismar yok | Arbitrary File Read in Keras via HDF5 External Datasetskeras · keras · CWE-73 | Yüksek7,1 | — | %0,3 | 11 Şub 2026 |
26İzleyin | CVE-2026-12482İstismar yok | Path Traversal via Symlink Name Validation Bypass in keras-team/keraskeras · keras · CWE-22 | Orta6,5 | — | %0,3 | 14 Tem 2026 |
26İzleyin | CVE-2024-55459İstismar yok | An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_fkeras · keras · CWE-494 | Orta6,5 | — | %0,2 | 8 Oca 2025 |
- CVE-2024-366040Planlayın
Arbitrary code injection vulnerability in Keras framework < 2.13
KritikCVSS 9,8Kavram kanıtıEPSS %2keras · keras16 Nis 2024
- CVE-2026-1248139İzleyin
Deserialization of Untrusted Data in keras-team/keras
KritikCVSS 9,8İstismar yokEPSS %1keras · keras3 Tem 2026
- CVE-2025-990634İzleyin
Arbitrary Code execution in Keras Safe Mode
YüksekCVSS 8,6İstismar yokEPSS %0keras · keras19 Eyl 2025
- CVE-2025-874734İzleyin
Keras safe_mode bypass allows arbitrary code execution when loading a malicious model.
YüksekCVSS 8,6İstismar yokEPSS %0keras · keras11 Ağu 2025
- CVE-2026-1181632İzleyin
Path Traversal in keras-team/keras
YüksekCVSS 8,1İstismar yokEPSS %1keras · keras11 Haz 2026
- CVE-2026-146231İzleyin
Safe Mode Bypass in keras-team/keras
YüksekCVSS 7,8İstismar yokEPSS %0keras · keras13 Nis 2026
- CVE-2025-155030İzleyin
Arbitrary Code Execution via Crafted Keras Config for Model Loading
YüksekCVSS 7,3Kavram kanıtıEPSS %3keras · keras11 Mar 2025
- CVE-2025-990529İzleyin
Arbitary Code execution in Keras load_model()
YüksekCVSS 7,3İstismar yokEPSS %0keras · keras19 Eyl 2025
- CVE-2026-089728İzleyin
Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata
YüksekCVSS 7,1Kavram kanıtıEPSS %0keras · keras15 Oca 2026
- CVE-2026-166928İzleyin
Arbitrary File Read in Keras via HDF5 External Datasets
YüksekCVSS 7,1İstismar yokEPSS %0keras · keras11 Şub 2026
- CVE-2026-1248226İzleyin
Path Traversal via Symlink Name Validation Bypass in keras-team/keras
OrtaCVSS 6,5İstismar yokEPSS %0keras · keras14 Tem 2026
- CVE-2024-5545926İzleyin
An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_f
OrtaCVSS 6,5İstismar yokEPSS %0keras · keras8 Oca 2025