EUVD-2004-1061

Malware in sbrugna...

EUVD-2001-1228

Malware in sbrugna...

EUVD-2025-30281

Malicious code in bioql PyPI...

EUVD-2025-29503

Malicious code in bioql PyPI...

EUVD-2023-48152

Malicious code in bioql PyPI...

EUVD-2025-22647

Malicious code in bioql PyPI...

EUVD-2023-12208

Malicious code in bioql PyPI...

EUVD-2021-30615

Malicious code in bioql PyPI...

EUVD-2022-7180

Malicious code in bioql PyPI...

EUVD-2025-30279

Malicious code in bioql PyPI...

EUVD-2025-9430

Malicious code in bioql PyPI...

EUVD-2023-40565

Malicious code in bioql PyPI...

EUVD-2025-30277

Malicious code in bioql PyPI...

EUVD-2022-25023

Malicious code in bioql PyPI...

EUVD-2025-24127

Malicious code in bioql PyPI...

EUVD-2023-31864

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-9905

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Keras Model.loadmodel method can be exploited to achieve arbitrary code execution, even with safemode=True. One can create a specially crafted .h5/.hdf5 mod...

Arbitrary Code execution in Keras Safe Mode

...

GHSA-36RR-WW3J-VRJV The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file is loaded.

Note: This report has already been discussed with the Google OSS VRP team, who recommended that I reach out directly to the Keras team. I’ve chosen to do so privately rather than opening a public issue, due to the potential security implications. I also attempted to use the email address listed i...

The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file is loaded.

Note: This report has already been discussed with the Google OSS VRP team, who recommended that I reach out directly to the Keras team. I’ve chosen to do so privately rather than opening a public issue, due to the potential security implications. I also attempted to use the email address listed i...