EUVD-2022-30629

Malicious code in bioql PyPI...

EUVD-2021-32551

Malicious code in bioql PyPI...

EUVD-2025-19480

Malicious code in bioql PyPI...

EUVD-2025-18903

Malicious code in bioql PyPI...

EUVD-2025-20091

Malicious code in bioql PyPI...

The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file is loaded.

Note: This report has already been discussed with the Google OSS VRP team, who recommended that I reach out directly to the Keras team. I’ve chosen to do so privately rather than opening a public issue, due to the potential security implications. I also attempted to use the email address listed i...

GHSA-77WQ-646F-JRM2 Duplicate Advisory: The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file is loaded.

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-36rr-ww3j-vrjv. This link is maintained to preserve external references. Original Description The Keras Model.loadmodel method can be exploited to achieve arbitrary code execution, even with safemode=True. One c...

CVE-2025-9905

The Keras Model.loadmodel method can be exploited to achieve arbitrary code execution, even with safemode=True. One can create a specially crafted .h5/.hdf5 model archive that, when loaded via Model.loadmodel, will trigger arbitrary code to be executed. This is achieved by crafting a special...

AZL-67505 CVE-2025-9905 affecting package keras for versions less than 3.3.3-4

The Keras Model.loadmodel method can be exploited to achieve arbitrary code execution, even with safemode=True. One can create a specially crafted .h5/.hdf5 model archive that, when loaded via Model.loadmodel, will trigger arbitrary code to be executed. This is achieved by crafting a special...

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Z__filter_scaleoffset function.

...

HDF5 Metadata Attribute Decoder H5MM_strndup heap-based overflow

...

HDF5 H5Gnode.c H5G__node_cmp3 stack-based overflow

...

HDF5 H5FL.c H5FL__malloc memory leak

...

HDF5 h5 File H5SM.c H5SM_delete heap-based overflow

...

HDF5 H5Cimage.c H5C__reconstruct_cache_entry heap-based overflow

...

HDF5 H5HLcache.c H5HL__fl_deserialize heap-based overflow

...

HDF5 H5FSsection.c H5FS__sect_find_node heap-based overflow

...

Linux Distros Unpatched Vulnerability : CVE-2020-18232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in function H5Sclose in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file...

Linux Distros Unpatched Vulnerability : CVE-2018-17434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A SIGFPE signal is raised in the function applyfilters of h5repackfilters.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF...

Linux Distros Unpatched Vulnerability : CVE-2025-7067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5FSsinfoserializenodecb of the file src/H5FScache.c...