Media
CVE-2026-12570
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 29
Restablecer filtros
Media
CVE-2026-12480
Keras: HDF5 virtual datasets can disclose local files
Alta
CVE-2026-12484
Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data
Media
CVE-2026-9335
Keras: HDF5 links can disclose local file contents
Media
CVE-2026-12479
Keras: DiskIOStore permits path traversal through crafted layer names
Alta
CVE-2026-12481
Keras: Lambda deserialization can bypass safe mode and execute code
Baja
CVE-2026-12482
Keras: tar extraction permits symlink-based path traversal
Alta
CVE-2026-1462
Keras has an untrusted deserialization vulnerability
Alta
CVE-2026-1669
Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight Loading
Alta
CVE-2025-12060
Keras Directory Traversal Vulnerability
Media
CVE-2025-12058
Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery
Alta
CVE-2026-11816
Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in `keras/src/utils/file_utils.py`. The functions `filter_safe_tarinfos()` and `filt
Alta
CVE-2026-0897
Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (D
Crítica
CVE-2025-49655
Keras framework vulnerable to deserialization of untrusted data
Alta
CVE-2025-9906
Keras is vulnerable to Deserialization of Untrusted Data
Alta
CVE-2025-9905
The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file is loaded.
Alta
CVE-2025-8747
Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality
Alta
CVE-2025-1550
Arbitrary Code Execution via Crafted Keras Config for Model Loading
Media
CVE-2024-55459
keras Path Traversal vulnerability
Crítica
CVE-2024-3660
Keras code injection vulnerability
Media
CVE-2023-25661
TensorFlow Denial of Service vulnerability
Alta
CVE-2022-41894
Buffer overflow in `CONV_3D_TRANSPOSE` on TFLite
Media
CVE-2022-41887
Overflow in `tf.keras.losses.poisson`
Media
CVE-2022-36027
TensorFlow segfault TFLite converter on per-channel quantized transposed convolutions
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.