Lucene search
+L

11 matches found

PyPA
PyPA
•added 2026/08/10 10:43 a.m.•29 views

Keras: Lambda deserialization can bypass safe mode and execute code

A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handling of deserialization in the Lambda layer. Specifically, the raiseforlambdadeserialization function fails to enforce the safe-mode guard when safemode is set to None, which is the default...

9.8CVSS8.1AI score0.00719EPSS
SaveExploits1References11Affected Software1
Rows per page
Query Builder