PT-2026-76466

A vulnerability in keras-team/keras versions = 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5 ExternalLinks. The KerasFileEditor and keras.saving.load weights functions bypass the safe get h5 group and safe get h5 dataset helpers, which are designed to...