CVE-2026-0897

CVE-2026-0897 — Google Keras：权重加载中的 HDF5 形状炸弹拒绝服务漏洞 -orange?style=for-the-badge -brightgreen?style=for-the-badge 概述 字段| 详情 ---|--- CVE ID| CVE-2026-0897 软件包| keras（Google Keras） 注册源| PyPI 受影响版本| 3.0.0 至 3.13.0（含） 漏洞类型| CWE-770：无限制或无节流的资源分配 CVSS 分数| 7.1 高危（CVSS 4.0，CNA：Google Inc.） CVSS 向量|...

CVE-2026-12570 Denial of Service via HDF5 Shape Bomb in keras.models.load_model() in keras-team/keras

A vulnerability in keras-team/keras versions = 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in keras/src/saving/savinglib.py does not validate the shape or size of datasets, leading...

Keras vulnerable to DoS via Malicious .keras Model (HDF5 Shape Bomb Causes Petabyte Allocation in KerasFileEditor)

Summary Keras’s model loader KerasFileEditor unsafely loads user-supplied .keras model files containing HDF5-based weight files without performing any validation on HDF5 dataset metadata. An attacker can craft a .keras archive containing a valid model.weights.h5 file whose dataset declares an...