CVE-2026-12481

A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handling of deserialization in the Lambda layer. Specifically, the raiseforlambdadeserialization function fails to enforce the safe-mode guard when safemode is set to None, which is the default...

Arbitrary code injection vulnerability in Keras framework < 2.13

...

Keras < 2.13 Arbitrary Code Injection

The version of Keras installed on the remote host is prior to 2.13. It is, therefore, affected by an arbitrary code injection vulnerability in TensorFlow's Keras framework 2.13 which allows attackers to execute arbitrary code with the same permissions as the application using a model that allow...

CVE-2024-3660 Arbitrary code injection vulnerability in Keras framework < 2.13

A arbitrary code injection vulnerability in TensorFlow's Keras framework 2.13 allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective of the application...