7.3

GHSA-5478-V2W6-C6Q7: keras PyPI

CVSS: 7.3v4.0HighPublished
Published 11-03-2025Last modified 11-03-2025
Open JSON

Vulnerability summary

GHSA-5478-V2W6-C6Q7 is a high (CVSS 7.3) vulnerability in keras PyPI.

Overall risk
29/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.3/10
010
High · v4.0 (OSV · Pypi), selected by version preference
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 11-03-2025
    PublishedVulnerability first disclosed.
  2. 11-03-2025
    Last modifiedVulnerability information updated.

Description

Duplicate Advisory: Keras arbitrary code execution vulnerability # Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-48g7-3x6r-xfhp. This link is maintained to preserve external references. # Original Description The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive. By altering the config.json file within the archive, an attacker can specify arbitrary Python modules and functions, along with their arguments, to be loaded and executed during model loading.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

PyPI1 product
  • keras< 3.9.0

1 vendor · 1 product

References

5 links