CVE-2026-1462

A flaw was found in the keras package. This vulnerability allows an attacker to execute unauthorized code on a victim's system. It occurs when a victim loads a specially crafted .keras model, even if the safemode security feature is active. The issue arises because the keras package can...

PT-2024-27272 · Unknown +1 · Tensorflow +1

Name of the Vulnerable Software and Affected Versions: MLflow platform versions 2.0.0rc0 and newer Description: The issue allows deserialization of untrusted data, enabling a maliciously uploaded Tensorflow model to run arbitrary code on an end user's system when interacted with. Recommendations:...