EUVD-2022-30544

Malicious code in bioql PyPI...

EUVD-2025-8637

Malicious code in bioql PyPI...

EUVD-2022-30629

Malicious code in bioql PyPI...

EUVD-2025-30279

Malicious code in bioql PyPI...

EUVD-2024-26195

Malicious code in bioql PyPI...

EUVD-2025-7560

Malicious code in bioql PyPI...

EUVD-2025-7559

Malicious code in bioql PyPI...

The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file is loaded.

Note: This report has already been discussed with the Google OSS VRP team, who recommended that I reach out directly to the Keras team. I’ve chosen to do so privately rather than opening a public issue, due to the potential security implications. I also attempted to use the email address listed i...

GHSA-77WQ-646F-JRM2 Duplicate Advisory: The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file is loaded.

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-36rr-ww3j-vrjv. This link is maintained to preserve external references. Original Description The Keras Model.loadmodel method can be exploited to achieve arbitrary code execution, even with safemode=True. One c...

CVE-2025-9905

The Keras Model.loadmodel method can be exploited to achieve arbitrary code execution, even with safemode=True. One can create a specially crafted .h5/.hdf5 model archive that, when loaded via Model.loadmodel, will trigger arbitrary code to be executed. This is achieved by crafting a special...

AZL-67505 CVE-2025-9905 affecting package keras for versions less than 3.3.3-4

The Keras Model.loadmodel method can be exploited to achieve arbitrary code execution, even with safemode=True. One can create a specially crafted .h5/.hdf5 model archive that, when loaded via Model.loadmodel, will trigger arbitrary code to be executed. This is achieved by crafting a special...

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Z__filter_scaleoffset function.

...

HDF5 Metadata Attribute Decoder H5MM_strndup heap-based overflow

...

HDF5 H5Gnode.c H5G__node_cmp3 stack-based overflow

...

HDF5 H5FL.c H5FL__malloc memory leak

...

HDF5 h5 File H5SM.c H5SM_delete heap-based overflow

...

HDF5 H5Cimage.c H5C__reconstruct_cache_entry heap-based overflow

...

HDF5 H5HLcache.c H5HL__fl_deserialize heap-based overflow

...

HDF5 H5FSsection.c H5FS__sect_find_node heap-based overflow

...

Linux Distros Unpatched Vulnerability : CVE-2020-18232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in function H5Sclose in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file...