CVSS 4.0
7.1 highCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:NCVE-2026-0897
High (7.1) in keras keras. EPSS 0.3% chance of exploitation in the next 30 days. Fixed in keras 3.12.1, 3.13.1, 3.13.2.
Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory exhaustion and a crash of the Python interpreter via a crafted .keras archive containing a valid model.weights.h5 file whose dataset declares an extremely large shape.
Severity
CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
- CWE
- CWE-770
- Published
- Modified
- Record from
- the NVD, synced
Affected
- keras:keras
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-mgx6-5cf9-rr43 | PyPI | keras | >=3.0.0 <3.12.1 | 3.12.1 |
| GHSA-mgx6-5cf9-rr43 | PyPI | keras | >=3.13.0 <3.13.2 | 3.13.2 |
| PYSEC-2026-73 | PyPI | keras | >=3.0.0 <3.13.1 | 3.13.1 |