Vulnerabilidades do Google Keras
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Google Keras: 2 registro(s), com versões afetadas e correções.
CVE-2026-1669
Alta · 7.5
CWE-73 11/02/2026
Arbitrary File Read in Keras via HDF5 External Datasets
Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remote attacker to read local files and disclose sensitive information via a crafted .keras model file utilizing HDF5 external dataset references.
CVE-2026-0897
Alta · 7.5
CWE-770 15/01/2026
Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata
Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory exhaustion and a crash of the Python interpreter via a crafted .keras archive containing a valid model.weights.h5 file whose dataset declares an extremely large shape.