CVE-2026-9335

creationtimestamp| type| source ---|---|--- 2026-09-03 08:00:03+00:00| published-proof-of-concept| Telegram/QsxfNGKa9DD1Ty0sLmAQtevj7VeZEaNBPjsU4IDgEWKiqQ 2026-09-04 00:00:55+00:00| published-proof-of-concept| Telegram/QsxfNGKa9DD1Ty0sLmAQtevj7VeZEaNBPjsU4IDgEWKiqQ...

DEBIAN-CVE-2026-9335

A vulnerability in keras-team/keras versions = 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5 ExternalLinks. The KerasFileEditor and keras.saving.loadweights functions bypass the safegeth5group and safegeth5dataset helpers, which are designed to reject...