CVE-2026-0897

CVE-2026-0897 — Google Keras: ウェイト読み込みにおける HDF5 Shape Bomb によるサービス拒否DoS -orange?style=for-the-badge -brightgreen?style=for-the-badge 概要 フィールド| 詳細 ---|--- CVE ID| CVE-2026-0897 パッケージ| keras Google Keras レジストリ| PyPI 影響を受けるバージョン| 3.0.0 から 3.13.0 まで 両端を含む 脆弱性の種類| CWE-770: 制限またはスロットリングなしのリソース割り当て CVSS...

dga_predict

LSTMを使用したドメイン生成アルゴリズムの予測 このリポジトリには、ドメインをDGAまたは良性として分類するための非常にシンプルなコードが含まれています。このコードは、私たちのarxiv論文（https://arxiv.org/abs/1611.00791）での結果を示しています。違いの1つはデータセットです。論文とこのリポジトリの両方が良性としてAlexaトップ100万を使用していますが、このリポジトリは簡素化のために独自のドメインを生成します。 また、論文からLSTMとbigram分類器のみを実装しています。これらは2つの最良の分類器であり、Kerasで実装するのが簡単です。...

CVE-2024-3660-PoC

CVE-2024-3660 – TensorFlow Keras における悪意あるモデルによる任意コード実行 概要 CVE-2024-3660 は、TensorFlow の Keras フレームワークにおける任意コード実行の脆弱性で、バージョン \ --build-arg LPORT= \ -t tfimg . && \ containerid=$docker create tfimg && \ docker cp $containerid:/CVE20243660/CVE20243660.h5 ./CVE20243660.h5 && \ docker rm $containerid 2...

CVE-2026-9335-keras-hdf5-externallink

CVE-2026-9335 — Keras HDF5 ExternalLink によるローカルファイル内容の開示 2つの公開Keras API — keras.saving.KerasFileEditor と keras.saving.loadweights / model.loadweights — は、リンクタイプのチェックを行わずに 直接インデックス でHDF5グループメンバーを読み取ります。h5py はインデックス時に ExternalLink / SoftLink を自動的にデリファレンス するため、攻撃者が提供した ExternalLink のみを含む...

cve-2025-1550

cve-2025-1550 kerasモデルjson rce...

OESA-2026-3953 python-Keras security update

Keras is a high-level neural networks API for Python. Security Fixes: A vulnerability in keras-team/keras versions = 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in...

OESA-2026-3952 python-Keras security update

Keras is a high-level neural networks API for Python. Security Fixes: A vulnerability in keras-team/keras versions = 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in keras

Summary IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in keras Vulnerability Details CVEID:CVE-2026-11816 DESCRIPTION: Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in keras/src/utils/fileutils.py. T...

PYSEC-2026-3856 Keras model loading is vulnerable to denial of service through HDF5 shape bombs

A vulnerability in keras-team/keras versions 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in keras/src/saving/savinglib.py does not validate the shape or size of datasets, leading t...

Keras model loading is vulnerable to denial of service through HDF5 shape bombs

A vulnerability in keras-team/keras versions 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in keras/src/saving/savinglib.py does not validate the shape or size of datasets, leading t...

Security Bulletin: Vulnerability in Netty affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Netty has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerability...

Unity Linux 20.1070e Security Update: python-Keras (UTSA-2026-104956)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104956 advisory. A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the filtersafetarinfos validation in...

Security Bulletin: Vulnerability in keras-team/keras affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in keras-team/keras has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...

Security Bulletin: Vulnerability in Keras affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Keras has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerability...

CLSA-2026-1787149068 TuxCare security update for keras (1 CVE)

TuxCare rebuilt keras to address 1 CVE. Fixed in 2.15.0.post2+tuxcare...

Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data

A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle data through the public keras.layers.TorchModuleWrapper.fromconfig method. This method invokes torch.load..., weightsonly=False without requiring an explicit unsafe opt-in, such ...

Keras: DiskIOStore permits path traversal through crafted layer names

A path traversal vulnerability exists in keras-team/keras version 3.14.0, specifically in the DiskIOStore.make method within the Keras 3 model saving and loading library. This vulnerability arises from the improper handling of user-provided layer names, which are used to construct directory paths...

Keras: tar extraction permits symlink-based path traversal

A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the filtersafetarinfos validation in keras/src/utils/fileutils.py. Specifically, symlink entries are not subjected to the same ispathindir validation as regular file entries,...

PYSEC-2026-3633 Keras: HDF5 links can disclose local file contents

A vulnerability in keras-team/keras versions = 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5 ExternalLinks. The KerasFileEditor and keras.saving.loadweights functions bypass the safegeth5group and safegeth5dataset helpers, which are designed to reject...

PYSEC-2026-3631 Keras: Lambda deserialization can bypass safe mode and execute code

A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handling of deserialization in the Lambda layer. Specifically, the raiseforlambdadeserialization function fails to enforce the safe-mode guard when safemode is set to None, which is the default...