Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/07/03 9:31 p.m.•18 views

Keras: Lambda deserialization can bypass safe mode and execute code

A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handling of deserialization in the Lambda layer. Specifically, the raiseforlambdadeserialization function fails to enforce the safe-mode guard when safemode is set to None, which is the default...

9.8CVSS8.7AI score0.00719EPSS
SaveExploits1References9Affected Software1
Rows per page
Query Builder