CVE-2026-0897

CVE-2026-0897 — Google Keras: ウェイト読み込みにおける HDF5 Shape Bomb によるサービス拒否DoS -orange?style=for-the-badge -brightgreen?style=for-the-badge 概要 フィールド| 詳細 ---|--- CVE ID| CVE-2026-0897 パッケージ| keras Google Keras レジストリ| PyPI 影響を受けるバージョン| 3.0.0 から 3.13.0 まで 両端を含む 脆弱性の種類| CWE-770: 制限またはスロットリングなしのリソース割り当て CVSS...

CVE-2026-12570 Denial of Service via HDF5 Shape Bomb in keras.models.load_model() in keras-team/keras

A vulnerability in keras-team/keras versions = 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in keras/src/saving/savinglib.py does not validate the shape or size of datasets, leading...

CVE-2026-12570 Denial of Service via HDF5 Shape Bomb in keras.models.load_model() in keras-team/keras

A vulnerability in keras-team/keras versions = 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in keras/src/saving/savinglib.py does not validate the shape or size of datasets, leading...

Keras vulnerable to DoS via Malicious .keras Model (HDF5 Shape Bomb Causes Petabyte Allocation in KerasFileEditor)

Summary Keras’s model loader KerasFileEditor unsafely loads user-supplied .keras model files containing HDF5-based weight files without performing any validation on HDF5 dataset metadata. An attacker can craft a .keras archive containing a valid model.weights.h5 file whose dataset declares an...