Google Keras
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-1669 | 3.0.0 – < 3.13.1 | Arbitrary File Read in Keras via HDF5 External Datasets | HIGH 7.1 | 0.3 % | ||
| CVE-2026-0897 | 3.0.0 – 3.13.0 | Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata | HIGH 7.1 | 0.3 % | ||
| CVE-2025-8747 | 3.0.0 – 3.10.0 | Keras safe_mode bypass allows arbitrary code execution when loading a malicious model. | HIGH 8.6 | 0.1 % | ||
| CVE-2025-1550 | 3.0.0 – < 3.8.0 | Arbitrary Code Execution via Crafted Keras Config for Model Loading | HIGH 7.3 | 2.6 % |