PT-2026-59205

A vulnerability in the TFSMLayer class of the keras package, version 3.13.0, allows attacker-controlled TensorFlow SavedModels to be loaded during deserialization of .keras models, even when safe mode=True. This bypasses the security guarantees of safe mode and enables arbitrary attacker-controll...