CVE-2026-12482

A flaw was found in Keras. An attacker can exploit a vulnerability in the tar archive processing to bypass security validations. This allows for the creation of symbolic links symlinks outside of the intended directory, which could lead to unauthorized access to or modification of files on the...

CVE-2026-0897

A flaw was found in Keras. A remote attacker can cause a Denial of Service DoS by providing a specially crafted .keras archive containing a model weights file model.weights.h5 that declares an extremely large data shape. This can lead to excessive memory allocation, resulting in memory exhaustion...