# Keras (PyPI) vulnerabilities Source: https://junglewise.ai/threats/technologies/keras Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/keras.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 27 vulnerabilities in Keras (PyPI): 0 in the last 7 days and 0 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-12570, was published on 10 August 2026. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 0 - All time: 27 (1 critical, 0 exploited in the wild) ## About Keras (PyPI) Deep learning library providing high-level neural network APIs and abstractions. ## Latest Keras (PyPI) vulnerabilities - [CVE-2026-12570: Keras model loading denial of service via HDF5 shape bombs](https://junglewise.ai/threats/cve-2026-12570-keras-model-loading-denial-of-service-via-hdf5-shape-bombs) (medium, CVSS 5.5, published 10 Aug 2026) - [CVE-2026-9335: Keras HDF5 arbitrary file disclosure via ExternalLinks](https://junglewise.ai/threats/cve-2026-9335-keras-hdf5-arbitrary-file-disclosure-via-externallinks) (medium, CVSS 6.5, published 2 Aug 2026) - [CVE-2026-12484: Keras unsafe deserialization in TorchModuleWrapper](https://junglewise.ai/threats/cve-2026-12484-keras-unsafe-deserialization-in-torchmodulewrapper) (high, CVSS 7.8, published 19 Jul 2026) - [CVE-2026-12482: Keras path traversal via symlink in filter_safe_tarinfos](https://junglewise.ai/threats/cve-2026-12482-keras-path-traversal-via-symlink-in-filter-safe-tarinfos) (low, CVSS 3.1, published 14 Jul 2026) - [CVE-2026-12481: Keras Team Keras arbitrary code execution in Lambda layer](https://junglewise.ai/threats/cve-2026-12481-keras-team-keras-arbitrary-code-execution-in-lambda-layer) (high, CVSS 8.8, published 3 Jul 2026) - [CVE-2026-12480: Keras arbitrary HDF5 file read in model loading](https://junglewise.ai/threats/cve-2026-12480-keras-arbitrary-hdf5-file-read-in-model-loading) (medium, CVSS 5.5, published 1 Jul 2026) - [CVE-2024-3660: PYSEC-2026-369 - Keras code injection vulnerability](https://junglewise.ai/threats/cve-2024-3660-keras-code-injection-vulnerability) (low, CVSS 3.1, published 29 Jun 2026) - [CVE-2026-12479: Keras Team Keras path traversal in DiskIOStore.make](https://junglewise.ai/threats/cve-2026-12479-keras-team-keras-path-traversal-in-diskiostore-make) (medium, CVSS 6.1, published 22 Jun 2026) - [CVE-2026-11816: Keras path traversal in archive extraction utilities](https://junglewise.ai/threats/cve-2026-11816-keras-path-traversal-in-archive-extraction-utilities) (high, CVSS 8.1, published 11 Jun 2026) - [CVE-2026-1462: Keras TFSMLayer arbitrary code execution via safe_mode bypass](https://junglewise.ai/threats/cve-2026-1462-keras-tfsmlayer-arbitrary-code-execution-via-safe-mode-bypass) (high, CVSS 8.8, published 13 Apr 2026) - [Duplicate Advisory: Keras vulnerable to arbitrary file read in the model loading mechanism (HDF5 integration)](https://junglewise.ai/threats/duplicate-advisory-keras-vulnerable-to-arbitrary-file-read-in-the-model-8ef7c0f2) (medium, CVSS 4, published 12 Feb 2026) - [CVE-2026-1669: Google Keras arbitrary file read in HDF5 model loading](https://junglewise.ai/threats/cve-2026-1669-google-keras-arbitrary-file-read-in-hdf5-model-loading) (high, CVSS 7.5, published 11 Feb 2026) - [Duplicate Advisory: Google Keras Allocates Resources Without Limits or Throttling in the HDF5 weight loading component](https://junglewise.ai/threats/duplicate-advisory-google-keras-allocates-resources-without-limits-or-1f2e74f6) (medium, CVSS 4, published 15 Jan 2026) - [CVE-2026-0897: Google Keras Denial of Service via HDF5 shape bomb in weight loading](https://junglewise.ai/threats/cve-2026-0897-google-keras-denial-of-service-via-hdf5-shape-bomb-in-weight) (high, CVSS 7.5, published 15 Jan 2026) - [CVE-2025-12638: Duplicate Advisory: Keras keras.utils.get_file API is vulnerable to a path traversal attack](https://junglewise.ai/threats/cve-2025-12638-duplicate-advisory-keras-keras-utils-get-file-api-is-vulnerable) (high, CVSS 8, published 28 Nov 2025) - [Keras keras.utils.get_file path traversal in TAR extraction](https://junglewise.ai/threats/keras-keras-utils-get-file-path-traversal-in-tar-extraction-d88c39fb) (medium, CVSS 4, published 30 Oct 2025) - [CVE-2025-12060: PYSEC-2026-1486 - Keras Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2025-12060-keras-directory-traversal-vulnerability) (low, CVSS 3.1, published 30 Oct 2025) - [CVE-2025-12058: PYSEC-2026-1487 - Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery](https://junglewise.ai/threats/cve-2025-12058-keras-is-vulnerable-to-arbitrary-local-file-loading-and-server) (medium, CVSS 4, published 29 Oct 2025) - [CVE-2025-49655: Keras framework vulnerable to deserialization of untrusted data](https://junglewise.ai/threats/cve-2025-49655-keras-framework-vulnerable-to-deserialization-of-untrusted-data) (critical, CVSS 9.8, published 17 Oct 2025) - [CVE-2025-9905: Keras arbitrary code execution via safe_mode bypass in H5 loading](https://junglewise.ai/threats/cve-2025-9905-keras-arbitrary-code-execution-via-safe-mode-bypass-in-h5-loading) (high, CVSS 4, published 19 Sep 2025) - [Duplicate Advisory: The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary…](https://junglewise.ai/threats/duplicate-advisory-the-keras-model-load-model-method-silently-ignores-83908907) (medium, CVSS 4, published 19 Sep 2025) - [CVE-2025-9906: Keras arbitrary code execution via untrusted model deserialization](https://junglewise.ai/threats/cve-2025-9906-keras-arbitrary-code-execution-via-untrusted-model-deserialization) (high, CVSS 7.3, published 19 Sep 2025) - [CVE-2025-8747: Keras safe_mode bypass via internal function reuse](https://junglewise.ai/threats/cve-2025-8747-keras-safe-mode-bypass-via-internal-function-reuse) (high, CVSS 8.8, published 12 Aug 2025) - [Duplicate Advisory: Keras safe mode bypass vulnerability](https://junglewise.ai/threats/duplicate-advisory-keras-safe-mode-bypass-vulnerability-9c229967) (medium, CVSS 4, published 11 Aug 2025) - [CVE-2025-1550: Keras arbitrary code execution in Model.load_model](https://junglewise.ai/threats/cve-2025-1550-keras-arbitrary-code-execution-in-model-load-model) (high, CVSS 4, published 11 Mar 2025) ## Most severe Keras (PyPI) vulnerabilities - [CVE-2025-49655: Keras framework vulnerable to deserialization of untrusted data](https://junglewise.ai/threats/cve-2025-49655-keras-framework-vulnerable-to-deserialization-of-untrusted-data) (critical, CVSS 9.8, published 17 Oct 2025) - [CVE-2026-12481: Keras Team Keras arbitrary code execution in Lambda layer](https://junglewise.ai/threats/cve-2026-12481-keras-team-keras-arbitrary-code-execution-in-lambda-layer) (high, CVSS 8.8, published 3 Jul 2026) - [CVE-2026-1462: Keras TFSMLayer arbitrary code execution via safe_mode bypass](https://junglewise.ai/threats/cve-2026-1462-keras-tfsmlayer-arbitrary-code-execution-via-safe-mode-bypass) (high, CVSS 8.8, published 13 Apr 2026) - [CVE-2025-8747: Keras safe_mode bypass via internal function reuse](https://junglewise.ai/threats/cve-2025-8747-keras-safe-mode-bypass-via-internal-function-reuse) (high, CVSS 8.8, published 12 Aug 2025) - [CVE-2026-11816: Keras path traversal in archive extraction utilities](https://junglewise.ai/threats/cve-2026-11816-keras-path-traversal-in-archive-extraction-utilities) (high, CVSS 8.1, published 11 Jun 2026) - [CVE-2025-12638: Duplicate Advisory: Keras keras.utils.get_file API is vulnerable to a path traversal attack](https://junglewise.ai/threats/cve-2025-12638-duplicate-advisory-keras-keras-utils-get-file-api-is-vulnerable) (high, CVSS 8, published 28 Nov 2025) - [CVE-2026-12484: Keras unsafe deserialization in TorchModuleWrapper](https://junglewise.ai/threats/cve-2026-12484-keras-unsafe-deserialization-in-torchmodulewrapper) (high, CVSS 7.8, published 19 Jul 2026) - [CVE-2026-0897: Google Keras Denial of Service via HDF5 shape bomb in weight loading](https://junglewise.ai/threats/cve-2026-0897-google-keras-denial-of-service-via-hdf5-shape-bomb-in-weight) (high, CVSS 7.5, published 15 Jan 2026) - [CVE-2026-1669: Google Keras arbitrary file read in HDF5 model loading](https://junglewise.ai/threats/cve-2026-1669-google-keras-arbitrary-file-read-in-hdf5-model-loading) (high, CVSS 7.5, published 11 Feb 2026) - [CVE-2025-9906: Keras arbitrary code execution via untrusted model deserialization](https://junglewise.ai/threats/cve-2025-9906-keras-arbitrary-code-execution-via-untrusted-model-deserialization) (high, CVSS 7.3, published 19 Sep 2025) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other PyPI technologies - [tensorflow (PyPI)](https://junglewise.ai/threats/technologies/pypi-tensorflow): 435 vulnerabilities - [tensorflow-cpu (PyPI)](https://junglewise.ai/threats/technologies/tensorflow-cpu): 430 vulnerabilities - [tensorflow-gpu (PyPI)](https://junglewise.ai/threats/technologies/tensorflow-gpu): 427 vulnerabilities - [open-webui (PyPI)](https://junglewise.ai/threats/technologies/open-webui): 177 vulnerabilities - [Django (PyPI)](https://junglewise.ai/threats/technologies/django): 173 vulnerabilities - [apache-airflow (PyPI)](https://junglewise.ai/threats/technologies/apache-airflow): 159 vulnerabilities - [pillow (PyPI)](https://junglewise.ai/threats/technologies/pillow): 125 vulnerabilities - [praisonai (PyPI)](https://junglewise.ai/threats/technologies/pypi-praisonai): 120 vulnerabilities - [vllm (PyPI)](https://junglewise.ai/threats/technologies/pypi-vllm): 117 vulnerabilities - [plone (PyPI)](https://junglewise.ai/threats/technologies/pypi-plone): 101 vulnerabilities - [mlflow (PyPI)](https://junglewise.ai/threats/technologies/mlflow): 88 vulnerabilities - [picklescan (PyPI)](https://junglewise.ai/threats/technologies/picklescan): 86 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Keras (PyPI) vulnerabilities", https://junglewise.ai/threats/technologies/keras, 13 November 2026.