CVE-2025-8747 vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

decima2 (>=0.1.0 <=0.2.1), gpbench (>=1.0.3 <=1.2.2) +8 more potentially affected by CVE-2025-8747 via keras (>=3.0.0 <=3.10.0)

keras PYPI version =3.0.0, =0.1.0, =1.0.3, =0.0.28, =2.4.0, =0.1.0, =0.1.1, =1.1.0, =1.0.0, =1.2.0 Source cves: CVE-2025-8747 Source advisory: OSV:GHSA-C9RC-MG46-23W3...

CVE-2025-8747

creationtimestamp| type| source ---|---|--- 2025-08-11 09:01:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lw4gprlg442m 2025-08-11 11:51:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw4q7h3ze52a 2025-08-11 22:55:09+00:00| published-proof-of-concept|...

CVE-2025-8747 Keras safe_mode bypass allows arbitrary code execution when loading a malicious model.

A safe mode bypass vulnerability in the Model.loadmodel method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted .keras model archive...