Medium
CVE-2026-12570
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 29
Reset filters
Medium
CVE-2026-12480
Keras: HDF5 virtual datasets can disclose local files
High
CVE-2026-12484
Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data
Medium
CVE-2026-9335
Keras: HDF5 links can disclose local file contents
Medium
CVE-2026-12479
Keras: DiskIOStore permits path traversal through crafted layer names
High
CVE-2026-12481
Keras: Lambda deserialization can bypass safe mode and execute code
Low
CVE-2026-12482
Keras: tar extraction permits symlink-based path traversal
High
CVE-2026-1462
Keras has an untrusted deserialization vulnerability
High
CVE-2026-1669
Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight Loading
High
CVE-2025-12060
Keras Directory Traversal Vulnerability
Medium
CVE-2025-12058
Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery
High
CVE-2026-11816
Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in `keras/src/utils/file_utils.py`. The functions `filter_safe_tarinfos()` and `filt
High
CVE-2026-0897
Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (D
Critical
CVE-2025-49655
Keras framework vulnerable to deserialization of untrusted data
High
CVE-2025-9906
Keras is vulnerable to Deserialization of Untrusted Data
High
CVE-2025-9905
The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file is loaded.
High
CVE-2025-8747
Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality
High
CVE-2025-1550
Arbitrary Code Execution via Crafted Keras Config for Model Loading
Medium
CVE-2024-55459
keras Path Traversal vulnerability
Critical
CVE-2024-3660
Keras code injection vulnerability
Medium
CVE-2023-25661
TensorFlow Denial of Service vulnerability
High
CVE-2022-41894
Buffer overflow in `CONV_3D_TRANSPOSE` on TFLite
Medium
CVE-2022-41887
Overflow in `tf.keras.losses.poisson`
Medium
CVE-2022-36027
TensorFlow segfault TFLite converter on per-channel quantized transposed convolutions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.