CVE-2026-0897

CVE-2026-0897 — Google Keras: Denial of Service via HDF5 Shape Bomb in Weight Loading -orange?style=for-the-badge -brightgreen?style=for-the-badge Overview Field| Details ---|--- CVE ID| CVE-2026-0897 Package| keras Google Keras Registry| PyPI Affected Versions| 3.0.0 through 3.13.0 inclusive...

rails-forensics-CVE-2026-66066

rails-forensics-CVE-2026-66066 Tooling and method for answering two questions about a Rails application and CVE-2026-66066, the Active Storage and libvips arbitrary file read known as KindaRails2Shell: 1. Was I vulnerable, and for how long? 2. Was I exploited, and if so, what left the building? T...

CVE-2026-9335-keras-hdf5-externallink

CVE-2026-9335 — Keras HDF5 ExternalLink local file-content disclosure Two public Keras APIs — keras.saving.KerasFileEditor and keras.saving.loadweights / model.loadweights — read HDF5 group members by direct indexing without a link-type check. h5py auto-dereferences ExternalLink / SoftLink on...

CVE-2026-66066

CVE-2026-66066 — KindaRails2Shell Ruby on Rails Active Storage + libvips arbitrary file read → conditional remote code execution RCE PoC tool. Single-file, Python 3.11+ pure standard library with zero dependencies , includes MAT/HDF5 hybrid payloads, a pure-Python PNG pixel decoder, offset reads,...

CVE-2026-19028 affecting package hdf5 for versions less than 1.14.6-6

CVE-2026-19028 affecting package hdf5 for versions less than 1.14.6-6. A patched version of the package is available...

CVE-2026-19027 affecting package hdf5 for versions less than 1.14.6-6

CVE-2026-19027 affecting package hdf5 for versions less than 1.14.6-6. A patched version of the package is available...

CVE-2026-19026 affecting package hdf5 for versions less than 1.14.6-6

CVE-2026-19026 affecting package hdf5 for versions less than 1.14.6-6. A patched version of the package is available...

CVE-2025-2308 affecting package hdf5 for versions less than 1.14.6-6

CVE-2025-2308 affecting package hdf5 for versions less than 1.14.6-6. A patched version of the package is available...

CVE-2026-19025 affecting package hdf5 for versions less than 1.14.6-6

CVE-2026-19025 affecting package hdf5 for versions less than 1.14.6-6. A patched version of the package is available...

CVE-2025-2309 affecting package hdf5 for versions less than 1.14.6-6

CVE-2025-2309 affecting package hdf5 for versions less than 1.14.6-6. A patched version of the package is available...

CVE-2026-120499

A flaw was found in h5io. This vulnerability allows an attacker to execute arbitrary code by convincing a user to process a specially crafted Hierarchical Data Format HDF5 file. During file parsing in the readhdf5 function, unsafe evaluation and deserialization of embedded objects enables...

CVE-2026-120499

h5io before 0.2.6 contains a code injection vulnerability in readhdf5 that allows attackers to execute arbitrary code by supplying a crafted HDF5 file. Attackers can store Python code in a node titled timezone, which triageread passes to eval with builtins reachable, name an arbitrary module in...

EUVD-2026-117602

h5io before 0.2.6 contains a code injection vulnerability in readhdf5 that allows attackers to execute arbitrary code by supplying a crafted HDF5 file. Attackers can store Python code in a node titled timezone, which triageread passes to eval with builtins reachable, name an arbitrary module in...

CVE-2026-120499 h5io before 0.2.6 Arbitrary Code Execution via read_hdf5

h5io before 0.2.6 contains a code injection vulnerability in readhdf5 that allows attackers to execute arbitrary code by supplying a crafted HDF5 file. Attackers can store Python code in a node titled timezone, which triageread passes to eval with builtins reachable, name an arbitrary module in...

CVE-2026-120499 h5io before 0.2.6 Arbitrary Code Execution via read_hdf5

h5io before 0.2.6 contains a code injection vulnerability in readhdf5 that allows attackers to execute arbitrary code by supplying a crafted HDF5 file. Attackers can store Python code in a node titled timezone, which triageread passes to eval with builtins reachable, name an arbitrary module in...

CVE-2026-120499

The h5io library before version 0.2.6 is vulnerable to a code injection vulnerability within the read_hdf5() function. An attacker can execute arbitrary code by providing a specially crafted HDF5 file using several methods: storing Python code in a node titled timezone (which is passed to eval() ...

CVE-2026-120757

HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5Lexterntraverse in src/H5Lexternal.c, the default traversal callback for external links. The callback locates the target file name and object path within the link’s user data using strlen without validating the buffer against...

CVE-2026-120758

HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HLunprotect in src/H5HL.c. H5HLprotect pins a single metadata cache entry for a local heap, either the heap prefix or the separate data block, and H5HLunprotect unpins it on the final unprotect. When the metadata cache...

CVE-2026-120756

HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5Ochunkdeserialize in src/H5Ocache.c. When decoding object header messages, the declared message size is checked against the end of the chunk image before the remainder of the message header flags, and for version 2 object...

CVE-2026-120754

HDF5 through 2.2.0 contains an uninitialized memory read vulnerability in H5Zfilterscaleoffset in src/H5Zscaleoffset.c. The decode path validates reads against the allocated size of the chunk buffer rather than the number of bytes actually read from the file. Because H5Dchunklock deliberately siz...