CVE-2026-0897

CVE-2026-0897 — Google Keras: Denegación de Servicio mediante Bomba de Forma HDF5 en la Carga de Pesos -orange?style=for-the-badge -brightgreen?style=for-the-badge Resumen Campo| Detalles ---|--- ID CVE| CVE-2026-0897 Paquete| keras Google Keras Registro| PyPI Versiones Afectadas| 3.0.0 hasta...

dga_predict

使用LSTM预测域名生成算法 这个代码库包含非常简单的代码，用于将域名分类为DGA或良性。该代码展示了我们在arxiv论文（https://arxiv.org/abs/1611.00791）中的结果。一个区别是数据集。论文和这个代码库都使用Alexa前100万作为良性域名，但这个代码库为简单起见生成了自己的域名。 我们还仅实现了论文中的LSTM和bigram分类器。这两个是最好的分类器，并且在Keras中实现简单。 运行代码 python run.py...

CVE-2024-3660-PoC

CVE-2024-3660 – 通过恶意模型在TensorFlow Keras中执行任意代码 概述 CVE-2024-3660 是 TensorFlow 的 Keras 框架中的一个任意代码执行漏洞，影响版本 \ --build-arg LPORT= \ -t tfimg . && \ containerid=$docker create tfimg && \ docker cp $containerid:/CVE20243660/CVE20243660.h5 ./CVE20243660.h5 && \ docker rm $containerid 2. 加载恶意模型（受害者端）...

CVE-2026-9335-keras-hdf5-externallink

CVE-2026-9335 — Divulgación de contenido de archivos locales HDF5 mediante ExternalLink en Keras Dos APIs públicas de Keras — keras.saving.KerasFileEditor y keras.saving.loadweights / model.loadweights — leen miembros de grupos HDF5 mediante indexación directa sin verificar el tipo de enlace. h5p...

cve-2025-1550

cve-2025-1550 rce de json de modelo keras...

OESA-2026-3953 python-Keras security update

Keras is a high-level neural networks API for Python. Security Fixes: A vulnerability in keras-team/keras versions = 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in...

OESA-2026-3952 python-Keras security update

Keras is a high-level neural networks API for Python. Security Fixes: A vulnerability in keras-team/keras versions = 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in keras

Summary IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in keras Vulnerability Details CVEID:CVE-2026-11816 DESCRIPTION: Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in keras/src/utils/fileutils.py. T...

PYSEC-2026-3856 Keras model loading is vulnerable to denial of service through HDF5 shape bombs

A vulnerability in keras-team/keras versions 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in keras/src/saving/savinglib.py does not validate the shape or size of datasets, leading t...

Keras model loading is vulnerable to denial of service through HDF5 shape bombs

A vulnerability in keras-team/keras versions 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in keras/src/saving/savinglib.py does not validate the shape or size of datasets, leading t...

Security Bulletin: Vulnerability in Netty affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Netty has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerability...

Unity Linux 20.1070e Security Update: python-Keras (UTSA-2026-104956)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104956 advisory. A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the filtersafetarinfos validation in...

Security Bulletin: Vulnerability in keras-team/keras affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in keras-team/keras has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...

Security Bulletin: Vulnerability in Keras affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Keras has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerability...

CLSA-2026-1787149068 TuxCare security update for keras (1 CVE)

TuxCare rebuilt keras to address 1 CVE. Fixed in 2.15.0.post2+tuxcare...

Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data

A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle data through the public keras.layers.TorchModuleWrapper.fromconfig method. This method invokes torch.load..., weightsonly=False without requiring an explicit unsafe opt-in, such ...

Keras: DiskIOStore permits path traversal through crafted layer names

A path traversal vulnerability exists in keras-team/keras version 3.14.0, specifically in the DiskIOStore.make method within the Keras 3 model saving and loading library. This vulnerability arises from the improper handling of user-provided layer names, which are used to construct directory paths...

Keras: tar extraction permits symlink-based path traversal

A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the filtersafetarinfos validation in keras/src/utils/fileutils.py. Specifically, symlink entries are not subjected to the same ispathindir validation as regular file entries,...

PYSEC-2026-3631 Keras: Lambda deserialization can bypass safe mode and execute code

A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handling of deserialization in the Lambda layer. Specifically, the raiseforlambdadeserialization function fails to enforce the safe-mode guard when safemode is set to None, which is the default...

PYSEC-2026-3633 Keras: HDF5 links can disclose local file contents

A vulnerability in keras-team/keras versions = 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5 ExternalLinks. The KerasFileEditor and keras.saving.loadweights functions bypass the safegeth5group and safegeth5dataset helpers, which are designed to reject...