repository icon
keras-team / keras-tuner Project repository

A Hyperparameter Tuning Library for Keras

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN35 DAYS

FIX

WITHINN/A DAYS

Insecure Deserialization (CWE-502) in KerasTuner's SklearnTuner via unvalidated...
ahmadyskhan
self closed
Hyperband external checkpoint and build_config load via attacker controlled tune...
haoxucu
self closed
Hyperband external checkpoint and build_config load via attacker-controlled tune...
haoxucu
self closed
Remote Deadlock DoS via Missing try/finally in @synchronized Decorator
gdattacker-researcher
self closed
Test repo check - keras-tuner
ripp3rdoc
self closed
Path Traversal + Pickle RCE via trial_id in SklearnTuner (keras-tuner)
sucloudflare
duplicate
High
Remote Oracle DoS via Unhandled Exception in @synchronized Decorator (Missing tr...
pwnriad7
pending
Arbitrary Code Execution via Insecure Deserialization (pickle.load) in SklearnTu...
pwnriad7
self closed
Exception-unsafe lock in KerasTuner Oracle allows remote persistent Denial of Se...
saikrishnab069
pending
Arbitrary Code Execution via pickle.load in SklearnTuner Model Loading
tranhoangtu-it
pending
Arbitrary Code Execution via Unsafe pickle.load() in SklearnTuner.load_model()
rohanmulay1
pending
Remote Code Execution via Insecure Deserialization in SklearnTuner
hermesslipt
pending
Remote DoS via Lock Corruption in @synchronized Decorator — Oracle Process Perma...
hantul
pending
RCE via pickle.load() on sklearn Model Files in Sklearn Tuner
nhomyk
pending
Unsafe Pickle Deserialization in SklearnTuner.load_model() — Shared Directory RC...
snailsploit
pending
Unauthenticated gRPC Oracle Service Allows Trial Poisoning and Information Discl...
snailsploit
pending
Chained Exploit: Path Traversal + Unsafe Pickle Deserialization -> Unauthenticat...
namdn23
duplicate
High
Unsafe pickle.load() in SklearnTuner.load_model() Enables RCE via Malicious Tune...
odysseypro25-project
self closed
Oracle.reload() loads trial_id from untrusted JSON without sanitization — Path T...
namdn23
pending
SklearnTuner.load_model() deserializes untrusted pickle file without integrity c...
namdn23
self closed
Arbitrary code execution via unsafe pickle.load() in SklearnTuner model loading
elucidator-hky
self closed
Path Traversal via Unsanitized `trial_id` in Persisted State Enables Arbitrary F...
gdattacker-researcher
duplicate
High
Unsafe deserialization via pickle in Keras Tuner trial storage
etwithin
informative
High
Unsafe deserialization via pickle in Keras Tuner trial storage
etwithin
informative
High
Distributed Role Confusion: Substring-Based chief Check Lets Non-Chief Worker Ex...
4ur0n
pending
Unauthenticated gRPC Oracle server allows remote manipulation of distributed tra...
sinhsinhan
duplicate
Critical
Missing Authentication on Distributed Oracle gRPC Control Plane Enables Trial Po...
sendorrr
duplicate
High
DoS via Uncontrolled Resource Consumption in Oracle State Inflation
orel-asper
pending
Unauthenticated gRPC Oracle Service Allows Trial State Poisoning and Search Mani...
coledotcreates
duplicate
High
Arbitrary Code Execution via pickle.load() in SklearnTuner.load_model()
responsiblereport10
duplicate
High
Missing Authorization Checks in Oracle gRPC API Enables Unauthorized Trial Acces...
cr-itamarhershko
pending
Arbitrary Code Execution in Keras Tuner (SklearnTuner) via Insecure Deserializat...
blairmichaelg
duplicate
High
Default Extras and Import-time TensorFlow Coupling (PoC + Fix)
7908837174
not applicable
## Bug Report: Seed Reproducibility Broken Due to Improper Seed State Management...
7908837174
not applicable
Vulnerability Report: Insecure Deserialization in keras-team/keras-tuner Leadin...
mohit121312
duplicate
Critical
There is a directory traversal vulnerability in keras-tuner
lufeirider
pending
Critical Insecure gRPC Communication in Keras Tuner Enables MITM Attacks
jplopezy
pending
Keras Tuner SklearnTuner Deserialization Remote Code Execution Vulnerability
enoch-lyn
self closed
Shell Injection Vulnerabilities
feecs
pending
huntr: keras-team/keras-tuner