{"action":"Upgrade keras to 3.8.0 or later.","affected":[{"fixed":"3.8.0","introduced":"3.0.0"}],"component":"keras","cve_ids":["CVE-2025-1550"],"ecosystem":"PyPI","epss":0.02626,"exploited":false,"fixed_versions":["3.8.0"],"ghsa_id":"GHSA-48g7-3x6r-xfhp","id":"tcs_01M5KGNQ75HA3WDV8MFA0M4AB5","modified_at":"2026-06-10T17:01:53.711341676Z","published_at":"2025-03-11T09:15:25.217Z","references":["https://osv.dev/vulnerability/PYSEC-2025-122","https://github.com/keras-team/keras/pull/20751","https://towerofhanoi.it/writeups/cve-2025-1550/","https://github.com/advisories/GHSA-48g7-3x6r-xfhp"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"PYSEC-2025-122","url":"https://osv.dev/vulnerability/PYSEC-2025-122"}],"summary":"The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive. By altering the config.json file within the ar"}