CVE-2026-9335

A vulnerability in keras-team/keras versions = 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5 ExternalLinks. The "KerasFileEditor" and "keras.saving.loadweights" functions bypass the "safegeth5group" and "safegeth5dataset" helpers, which are designed t...

CVE-2026-9335: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in keras-team/keras versions = 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5 ExternalLinks. The KerasFileEditor and keras.saving.loadweights functions bypass the safegeth5group and safegeth5dataset helpers, which are designed to reject...