PyPI/keras CVE-2025-8747: high 7.8, EPSS 0.12%
A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2025-75
- https://jfrog.com/blog/keras-safe_mode-bypass-vulnerability/
- https://github.com/keras-team/keras/pull/21429
- https://github.com/advisories/GHSA-c9rc-mg46-23w3
CVE-2025-8747 · published · modified · JSON