An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file function.
CVSS Score
6.5
EPSS Score
0.002
Published
2025-01-08
A arbitrary code injection vulnerability in TensorFlow's Keras framework (<2.13) allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective of the application.
CVSS Score
9.8
EPSS Score
0.017
Published
2024-04-16
Page 2