CVE-2025-8747
2 advisories.
PyPI/keras CVE-2025-8747: high 8.8
Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality
Action: Upgrade keras to 3.11.0 or later.
pip install keras==3.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.11.0 | - |
Fixed versions
| 3.11.0 |
Sources
- osv: GHSA-c9rc-mg46-23w3
- https://github.com/keras-team/keras/security/advisories/GHSA-c9rc-mg46-23w3
- https://nvd.nist.gov/vuln/detail/CVE-2025-8747
- https://github.com/keras-team/keras/pull/21429
- https://github.com/keras-team/keras/commit/713172ab56b864e59e2aa79b1a51b0e728bba858
- https://github.com/keras-team/keras
- https://github.com/pypa/advisory-database/tree/main/vulns/keras/PYSEC-2025-75.yaml
- https://jfrog.com/blog/keras-safe_mode-bypass-vulnerability
CVE-2025-8747 · published · modified · JSON
PyPI/keras CVE-2025-8747: high 7.8
A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2025-75
- https://jfrog.com/blog/keras-safe_mode-bypass-vulnerability/
- https://github.com/keras-team/keras/pull/21429
- https://github.com/advisories/GHSA-c9rc-mg46-23w3
CVE-2025-8747 · published · modified · JSON