1 matches found
PYSEC-2026-3632 Keras: DiskIOStore permits path traversal through crafted layer names
A path traversal vulnerability exists in keras-team/keras version 3.14.0, specifically in the DiskIOStore.make method within the Keras 3 model saving and loading library. This vulnerability arises from the improper handling of user-provided layer names, which are used to construct directory paths...
6.1CVSS6.3AI score0.00384EPSS
SaveExploits0References9
20