Server-Side Request Forgery (SSRF)

🗓️ 13 Dec 2025 07:53:43Reported by Veracode Vulnerability DatabaseType

Keras SSRF via StringLookup during model load from a crafted archive enables local file reads or remote requests despite safe_mode.

Reporter	Title	Published	Views	Family All 36
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which are vulnerable to CVEs.	29 Dec 202505:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses keras-3.10.0-py3-none-any.whl, keras-2.14.0-py3-none-any.whl which are vulnerable to CVE-2025-12058, CVE-2025-12060, CVE-2025-9905, CVE-2025-9906.	30 Jan 202605:35	–	ibm
IBM Security Bulletins	Security Bulletin: Arbitrary File Read, SSRF, and Code Execution Vulnerabilities in TensorFlow Keras Model Loading (v2.13) affects watsonx.data	8 Apr 202608:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in keras-3.11.3-py3-none-any.whl	4 Feb 202622:27	–	ibm
Chainguard	CVE-2025-12058 vulnerabilities	4 Nov 202501:23	–	cgr
Circl	CVE-2025-12058	29 Oct 202510:26	–	circl
CNNVD	Keras 安全漏洞	29 Oct 202500:00	–	cnnvd
CVE	CVE-2025-12058	29 Oct 202508:48	–	cve
Cvelist	CVE-2025-12058 Vulnerability in Keras Model.load_model Leading to Arbitrary Local File Loading and SSRF	29 Oct 202508:48	–	cvelist
Debian CVE	CVE-2025-12058	29 Oct 202508:48	–	debiancve

Vulners

Node

keras kerasRange0.1.0–3.11.3python

Source	Link
github	www.github.com/keras-team/keras/pull/21751
cve	www.cve.org/CVERecord
github	www.github.com/keras-team/keras/commit/61ac8c1e51862c471dee7b49029c356f55531487
github	www.github.com/keras-team/keras/security/advisories/GHSA-qg93-c7p6-gg7f

03 Feb 2026 11:08Current

7.7High risk

Vulners AI Score7.7

CVSS 45.9

EPSS0.00079

SSVC