Skip to content

Vulnerabilities of Google Keras

Is your version affected?

CVE Summary Score Published
CVE-2026-1669 Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all… 7.1 High Feb 11, 2026
CVE-2026-0897 Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0… 7.1 High Jan 15, 2026
CVE-2025-8747 A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an… 8.6 High Aug 11, 2025
CVE-2025-1550 The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually… 7.3 High Mar 11, 2025

Other Google products