Lucene search
+L

1 matches found

OSV
OSV
•added 2026/08/10 10:43 a.m.•8 views

PYSEC-2026-3631 Keras: Lambda deserialization can bypass safe mode and execute code

A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handling of deserialization in the Lambda layer. Specifically, the raiseforlambdadeserialization function fails to enforce the safe-mode guard when safemode is set to None, which is the default...

8.8CVSS6.2AI score0.00719EPSS
SaveExploits1References11
Rows per page
Query Builder