Keras records
12 published records for vendor keras.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-502 Deserialization of Untrusted Data4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-913 Improper Control of Dynamically-Managed Code Resources1
- CWE-73 External Control of File Name or Path1
- CWE-494 Download of Code Without Integrity Check1
The weakness classes this vendor ships most often: where to look.
CWEAll records
12 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2024-3660Proof of concept | Arbitrary code injection vulnerability in Keras framework < 2.13keras · keras · CWE-94 | Critical9.8 | — | 1.7% | Apr 16, 2024 |
39Monitor | CVE-2026-12481No exploit | Deserialization of Untrusted Data in keras-team/keraskeras · keras · CWE-502 | Critical9.8 | — | 0.7% | Jul 3, 2026 |
34Monitor | CVE-2025-9906No exploit | Arbitrary Code execution in Keras Safe Modekeras · keras · CWE-502 | High8.6 | — | 0.2% | Sep 19, 2025 |
34Monitor | CVE-2025-8747No exploit | Keras safe_mode bypass allows arbitrary code execution when loading a malicious model.keras · keras · CWE-502 | High8.6 | — | 0.1% | Aug 11, 2025 |
32Monitor | CVE-2026-11816No exploit | Path Traversal in keras-team/keraskeras · keras · CWE-22 | High8.1 | — | 0.5% | Jun 11, 2026 |
31Monitor | CVE-2026-1462No exploit | Safe Mode Bypass in keras-team/keraskeras · keras · CWE-502 | High7.8 | — | 0.4% | Apr 13, 2026 |
30Monitor | CVE-2025-1550Proof of concept | Arbitrary Code Execution via Crafted Keras Config for Model Loadingkeras · keras · CWE-94 | High7.3 | — | 2.6% | Mar 11, 2025 |
29Monitor | CVE-2025-9905No exploit | Arbitary Code execution in Keras load_model()keras · keras · CWE-913 | High7.3 | — | 0.2% | Sep 19, 2025 |
28Monitor | CVE-2026-1669No exploit | Arbitrary File Read in Keras via HDF5 External Datasetskeras · keras · CWE-73 | High7.1 | — | 0.3% | Feb 11, 2026 |
28Monitor | CVE-2026-0897Proof of concept | Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadatakeras · keras · CWE-770 | High7.1 | — | 0.3% | Jan 15, 2026 |
26Monitor | CVE-2026-12482No exploit | Path Traversal via Symlink Name Validation Bypass in keras-team/keraskeras · keras · CWE-22 | Medium6.5 | — | 0.3% | Jul 14, 2026 |
26Monitor | CVE-2024-55459No exploit | An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_fkeras · keras · CWE-494 | Medium6.5 | — | 0.2% | Jan 8, 2025 |
- CVE-2024-366040Plan
Arbitrary code injection vulnerability in Keras framework < 2.13
CriticalCVSS 9.8Proof of conceptEPSS 1%keras · kerasApr 16, 2024
- CVE-2026-1248139Monitor
Deserialization of Untrusted Data in keras-team/keras
CriticalCVSS 9.8No exploitEPSS 0%keras · kerasJul 3, 2026
- CVE-2025-990634Monitor
Arbitrary Code execution in Keras Safe Mode
HighCVSS 8.6No exploitEPSS 0%keras · kerasSep 19, 2025
- CVE-2025-874734Monitor
Keras safe_mode bypass allows arbitrary code execution when loading a malicious model.
HighCVSS 8.6No exploitEPSS 0%keras · kerasAug 11, 2025
- CVE-2026-1181632Monitor
Path Traversal in keras-team/keras
HighCVSS 8.1No exploitEPSS 0%keras · kerasJun 11, 2026
- CVE-2026-146231Monitor
Safe Mode Bypass in keras-team/keras
HighCVSS 7.8No exploitEPSS 0%keras · kerasApr 13, 2026
- CVE-2025-155030Monitor
Arbitrary Code Execution via Crafted Keras Config for Model Loading
HighCVSS 7.3Proof of conceptEPSS 2%keras · kerasMar 11, 2025
- CVE-2025-990529Monitor
Arbitary Code execution in Keras load_model()
HighCVSS 7.3No exploitEPSS 0%keras · kerasSep 19, 2025
- CVE-2026-166928Monitor
Arbitrary File Read in Keras via HDF5 External Datasets
HighCVSS 7.1No exploitEPSS 0%keras · kerasFeb 11, 2026
- CVE-2026-089728Monitor
Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata
HighCVSS 7.1Proof of conceptEPSS 0%keras · kerasJan 15, 2026
- CVE-2026-1248226Monitor
Path Traversal via Symlink Name Validation Bypass in keras-team/keras
MediumCVSS 6.5No exploitEPSS 0%keras · kerasJul 14, 2026
- CVE-2024-5545926Monitor
An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_f
MediumCVSS 6.5No exploitEPSS 0%keras · kerasJan 8, 2025