Executive brief
Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery
Affected products
- PyPI keras
Junglewise Threat Intelligence
CVE-2025-12058: PYSEC-2026-1487 - Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery
CVE-2025-12058 · Severity: medium · CVSS 4 · Published 2026-07-07
Technologies: keras (PyPI). Vendors: PyPI.
Related threats
- Keras model loading denial of service via HDF5 shape bombs
- A vulnerability in keras-team/keras versions <= 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5
- Keras unsafe deserialization in TorchModuleWrapper
- Keras path traversal via symlink in filter_safe_tarinfos
- PYSEC-2026-1486 - Keras Directory Traversal Vulnerability