PYSEC-2025-76

🗓️ 19 Sep 2025 09:15:36Reported by Python Packaging AdvisoryType

pypa🔗 github.com👁 10 Views

Keras load_model can execute arbitrary code via a crafted model with unsafe deserialization and a Lambda layer.

Reporter	Title	Published	Views	Family All 29
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in keras-2.13.1-py3-none-any.whl	23 Feb 202616:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses keras-3.10.0-py3-none-any.whl, keras-2.14.0-py3-none-any.whl which are vulnerable to CVE-2025-12058, CVE-2025-12060, CVE-2025-9905, CVE-2025-9906.	30 Jan 202605:35	–	ibm
IBM Security Bulletins	Security Bulletin: Arbitrary Code Execution in Keras	19 Dec 202515:10	–	ibm
IBM Security Bulletins	Security Bulletin: Arbitrary File Read, SSRF, and Code Execution Vulnerabilities in TensorFlow Keras Model Loading (v2.13) affects watsonx.data	8 Apr 202608:40	–	ibm
CBLMariner	CVE-2025-9906 affecting package keras for versions less than 3.3.3-4	1 Oct 202519:21	–	cbl_mariner
Circl	CVE-2025-9906	19 Sep 202509:22	–	circl
CNNVD	Keras 安全漏洞	19 Sep 202500:00	–	cnnvd
CVE	CVE-2025-9906	19 Sep 202508:15	–	cve
Cvelist	CVE-2025-9906 Arbitrary Code execution in Keras Safe Mode	19 Sep 202508:15	–	cvelist
Debian CVE	CVE-2025-9906	19 Sep 202508:15	–	debiancve