repository icon
keras-team / keras Project repository

Deep Learning for humans

Submit a report

FIRST INTERACTION

WITHIN12 DAYS

REVIEW

WITHIN12 DAYS

FIX

WITHINN/A DAYS

ReDoS in `model.summary(layer_range=...)` - user-supplied strings treated as raw...
hoanghai2110-web
self closed
NpzIOStore _reject_npz_bomb off-by-one allows sub-4GiB shape-bomb DoS
samrigby64
self closed
Stored XSS in KerasFileEditor via Unsanitized HDF5 Dataset Names
pwnriad7
self closed
Arbitrary file write to RCE via symbolic-link directory traversal in keras.utils...
linziyuu
self closed
Unsafe Lambda Deserialization Allows Code Execution in Keras Models When safe_mo...
chinhnguyen007
spam
TAR Path Traversal in keras.utils.get_file
haoit
informative
High
Pickle deserialization in KerasSaveable._unpickle_model() hardcodes safe_mode=Fa...
rajat4722
self closed
test
linziyuu
self closed
Arbitrary file write in keras.utils.get_file via hardlink info.name traversal
powerliftlog
informative
High
Arbitrary File Read via HDF5 model_config.json Path Traversal in Keras (CVE-2026...
clawdbartell-wq
not applicable
[RCE] Unsafe torch.load(weights_only=False) in Keras torch_utils.py
ngaturjiwo77-hue
self closed
Arbitrary Code Execution via Unsanitized marshal.loads() on Lambda Bytecode in k...
smridhi06
spam
test
nihcod
self closed
Unsafe Lambda Layer Deserialization in Keras (CVE-2025-9905)
quintessence-proof
spam
Arbitrary Code Execution via Attacker-Controlled `module` in `importlib.import_m...
microwaveovens-yay
self closed
RCE via marshal.loads in func_load when loading untrusted Keras models
galanzi2580-wq
self closed
PATH_TRAVERSAL in pip_build.py
muraveyapp
spam
INSECURE_DESER in python_utils.py
muraveyapp
spam
Export-time Allocation Denial of Service via Malicious input_signature in Keras
galanzi2580-wq
self closed
Deserialization Memory Bomb via __numpy__ and __tensor__ JSON Keys in serializat...
galanzi2580-wq
spam
Safe‑mode bypass in TorchModuleWrapper.from_config() allows unsafe torch.load()...
pwnriad7
self closed
INSECURE_DESER in python_utils.py
muraveyapp
spam
huntr: keras-team/keras