Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2026/02/12 12:31 a.m.15 views

Duplicate Advisory: Keras vulnerable to arbitrary file read in the model loading mechanism (HDF5 integration)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-3m4q-jmj6-r34q. This link is maintained to preserve external references. Original Description Arbitrary file read in the model loading mechanism HDF5 integration in Keras versions 3.0.0 through 3.13.1 on all...

7.5CVSS5.3AI score0.00298EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/02/12 12:31 a.m.11 views

GHSA-GFMX-QQQH-F38Q Duplicate Advisory: Keras vulnerable to arbitrary file read in the model loading mechanism (HDF5 integration)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-3m4q-jmj6-r34q. This link is maintained to preserve external references. Original Description Arbitrary file read in the model loading mechanism HDF5 integration in Keras versions 3.0.0 through 3.13.1 on all...

7.1CVSS5.8AI score0.00298EPSS
SaveExploits0References3
OSV
OSV
added 2026/02/11 11:16 p.m.7 views

AZL-77414 CVE-2026-1669 affecting package keras 3.3.3-6

Arbitrary file read in the model loading mechanism HDF5 integration in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remote attacker to read local files and disclose sensitive information via a crafted .keras model file utilizing HDF5 external dataset references...

7.5CVSS5.8AI score0.00298EPSS
SaveExploits0References1
Rows per page
Query Builder