~ / search / GHSA-cvhh-q5g5-qprp

GHSA-cvhh-q5g5-qprp

Keras framework vulnerable to deserialization of untrusted data

Source: GitHub Advisory Database (reviewed) Critical CVE-2025-49655

Packages

EcosystemPackageAffectedFixed in
PyPI keras >= 3.11.0, < 3.11.3 3.11.3

Details

As written in the advisory (Markdown source, shown as plain text).

Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s system when loaded despite safe mode being enabled. The vulnerability can be triggered through both local and remote files.

References

External links from the advisory. They lead to third-party sites.