PT-2026-67346

Name of the Vulnerable Software and Affected Versions keras-team/keras versions prior to 3.14.1 Description Improper handling of HDF5 ExternalLinks allows for arbitrary local HDF5 file content disclosure. The KerasFileEditor and keras.saving.load weights functions bypass the safe get h5 group and...