PyPI/keras CVE-2025-8747: high 8.8, EPSS 0.12%
Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality
Action: Upgrade keras to 3.11.0 or later.
pip install keras==3.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.11.0 | - |
Fixed versions
| 3.11.0 |
Sources
- osv: GHSA-c9rc-mg46-23w3
- https://github.com/keras-team/keras/security/advisories/GHSA-c9rc-mg46-23w3
- https://nvd.nist.gov/vuln/detail/CVE-2025-8747
- https://github.com/keras-team/keras/pull/21429
- https://github.com/keras-team/keras/commit/713172ab56b864e59e2aa79b1a51b0e728bba858
- https://github.com/keras-team/keras
- https://github.com/pypa/advisory-database/tree/main/vulns/keras/PYSEC-2025-75.yaml
- https://jfrog.com/blog/keras-safe_mode-bypass-vulnerability
CVE-2025-8747 · published · modified · JSON