CVE-2025-9905

CVE-2025-9905 affects Keras Model.load_model for .h5/.hdf5 archives, where safe_mode=True is ignored and Lambda layer can trigger arbitrary code execution. Vulnerability details: loading a crafted .h5 can execute code via pickled Lambda; legacy .h5 format is involved. Remediation: upgrade Keras t...

PT-2025-38517

Name of the Vulnerable Software and Affected Versions Keras affected versions not specified Description The Model.load model method can be exploited to achieve arbitrary code execution, even when safe mode is enabled. This is possible by creating a specially crafted .h5 or .hdf5 model archive tha...