Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-gu8d-jjtb-zuau

Summary The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive. By altering the config.json file within the archive, an attacker can specify arbitrary Python modules and functions, along with their arguments, to be loaded and executed during model loading.

Aliases

alias	CVE-2025-1550

alias	GHSA-48g7-3x6r-xfhp

alias	PYSEC-2025-122

Fixed_packages

url	pkg:deb/debian/keras@0?distro=bullseye
purl	pkg:deb/debian/keras@0?distro=bullseye
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/keras@0%3Fdistro=bullseye

url	pkg:deb/debian/keras@2.3.1%2Bdfsg-3?distro=bullseye
purl	pkg:deb/debian/keras@2.3.1%2Bdfsg-3?distro=bullseye
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/keras@2.3.1%252Bdfsg-3%3Fdistro=bullseye

url pkg:pypi/keras@3.8.0

purl pkg:pypi/keras@3.8.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1xj9-1kng-8ua4

vulnerability	VCID-dy5p-938j-d7fr

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keras@3.8.0

url pkg:pypi/keras@3.9.0

purl pkg:pypi/keras@3.9.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1xj9-1kng-8ua4

vulnerability	VCID-dy5p-938j-d7fr

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keras@3.9.0

Affected_packages

url pkg:pypi/keras@3.0.0

purl pkg:pypi/keras@3.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1xj9-1kng-8ua4

vulnerability	VCID-cmug-fp72-8qc4

vulnerability	VCID-d61w-bj6k-9kc9

vulnerability	VCID-dy5p-938j-d7fr

vulnerability	VCID-gu8d-jjtb-zuau

vulnerability	VCID-ptyp-n4df-aqf1

vulnerability	VCID-rgqk-3hht-h3dc

vulnerability	VCID-zsjb-zbnj-z3d8

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keras@3.0.0

url pkg:pypi/keras@3.0.1

purl pkg:pypi/keras@3.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1xj9-1kng-8ua4

vulnerability	VCID-dy5p-938j-d7fr

vulnerability	VCID-gu8d-jjtb-zuau

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keras@3.0.1

url pkg:pypi/keras@3.0.2

purl pkg:pypi/keras@3.0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1xj9-1kng-8ua4

vulnerability	VCID-dy5p-938j-d7fr

vulnerability	VCID-gu8d-jjtb-zuau

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keras@3.0.2

url pkg:pypi/keras@3.0.3

purl pkg:pypi/keras@3.0.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1xj9-1kng-8ua4

vulnerability	VCID-dy5p-938j-d7fr

vulnerability	VCID-gu8d-jjtb-zuau

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keras@3.0.3

url pkg:pypi/keras@3.0.4

purl pkg:pypi/keras@3.0.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1xj9-1kng-8ua4

vulnerability	VCID-dy5p-938j-d7fr

vulnerability	VCID-gu8d-jjtb-zuau

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keras@3.0.4

url pkg:pypi/keras@3.0.5

purl pkg:pypi/keras@3.0.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1xj9-1kng-8ua4

vulnerability	VCID-dy5p-938j-d7fr

vulnerability	VCID-gu8d-jjtb-zuau

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keras@3.0.5

url pkg:pypi/keras@3.1.0

purl pkg:pypi/keras@3.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1xj9-1kng-8ua4

vulnerability	VCID-dy5p-938j-d7fr

vulnerability	VCID-gu8d-jjtb-zuau

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keras@3.1.0

url pkg:pypi/keras@3.1.1

purl pkg:pypi/keras@3.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1xj9-1kng-8ua4

vulnerability	VCID-dy5p-938j-d7fr

vulnerability	VCID-gu8d-jjtb-zuau

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keras@3.1.1

url pkg:pypi/keras@3.2.0

purl pkg:pypi/keras@3.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1xj9-1kng-8ua4

vulnerability	VCID-dy5p-938j-d7fr

vulnerability	VCID-gu8d-jjtb-zuau

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keras@3.2.0

url pkg:pypi/keras@3.2.1

purl pkg:pypi/keras@3.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1xj9-1kng-8ua4

vulnerability	VCID-dy5p-938j-d7fr

vulnerability	VCID-gu8d-jjtb-zuau

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keras@3.2.1

url pkg:pypi/keras@3.3.0

purl pkg:pypi/keras@3.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1xj9-1kng-8ua4

vulnerability	VCID-dy5p-938j-d7fr

vulnerability	VCID-gu8d-jjtb-zuau

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keras@3.3.0

url pkg:pypi/keras@3.3.1

purl pkg:pypi/keras@3.3.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1xj9-1kng-8ua4

vulnerability	VCID-dy5p-938j-d7fr

vulnerability	VCID-gu8d-jjtb-zuau

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keras@3.3.1

url pkg:pypi/keras@3.3.2

purl pkg:pypi/keras@3.3.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1xj9-1kng-8ua4

vulnerability	VCID-dy5p-938j-d7fr

vulnerability	VCID-gu8d-jjtb-zuau

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keras@3.3.2

url pkg:pypi/keras@3.3.3

purl pkg:pypi/keras@3.3.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1xj9-1kng-8ua4

vulnerability	VCID-dy5p-938j-d7fr

vulnerability	VCID-gu8d-jjtb-zuau

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keras@3.3.3

url pkg:pypi/keras@3.4.0

purl pkg:pypi/keras@3.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1xj9-1kng-8ua4

vulnerability	VCID-dy5p-938j-d7fr

vulnerability	VCID-gu8d-jjtb-zuau

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keras@3.4.0

url pkg:pypi/keras@3.4.1

purl pkg:pypi/keras@3.4.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1xj9-1kng-8ua4

vulnerability	VCID-dy5p-938j-d7fr

vulnerability	VCID-gu8d-jjtb-zuau

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keras@3.4.1

url pkg:pypi/keras@3.5.0

purl pkg:pypi/keras@3.5.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1xj9-1kng-8ua4

vulnerability	VCID-dy5p-938j-d7fr

vulnerability	VCID-gu8d-jjtb-zuau

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keras@3.5.0

url pkg:pypi/keras@3.6.0

purl pkg:pypi/keras@3.6.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1xj9-1kng-8ua4

vulnerability	VCID-dy5p-938j-d7fr

vulnerability	VCID-gu8d-jjtb-zuau

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keras@3.6.0

url pkg:pypi/keras@3.7.0

purl pkg:pypi/keras@3.7.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1xj9-1kng-8ua4

vulnerability	VCID-dy5p-938j-d7fr

vulnerability	VCID-gu8d-jjtb-zuau

vulnerability	VCID-x454-t8qh-k7g1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keras@3.7.0

References

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1550.json

reference_id

reference_type

scores

value	8.2
scoring_system	cvssv3
scoring_elements	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1550.json

reference_url

https://github.com/keras-team/keras

reference_id

reference_type

scores

value	7.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/keras-team/keras

reference_url

https://github.com/keras-team/keras/commit/e67ac8ffd0c883bec68eb65bb52340c7f9d3a903

reference_id

reference_type

scores

value	7.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/keras-team/keras/commit/e67ac8ffd0c883bec68eb65bb52340c7f9d3a903

reference_url

https://github.com/keras-team/keras/pull/20751

reference_id

reference_type

scores

value	9.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

value	7.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/keras-team/keras/pull/20751

reference_url

https://github.com/keras-team/keras/releases/tag/v3.9.0

reference_id

reference_type

scores

value	7.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/keras-team/keras/releases/tag/v3.9.0

reference_url

https://towerofhanoi.it/writeups/cve-2025-1550/

reference_id

reference_type

scores

value	9.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

url

https://towerofhanoi.it/writeups/cve-2025-1550/

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=2351304
reference_id	2351304
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=2351304

reference_url	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/python/remote/52359.py
reference_id	CVE-2025-1550
reference_type	exploit
scores
url	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/python/remote/52359.py

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2025-1550

reference_id

CVE-2025-1550

reference_type

scores

value	7.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://nvd.nist.gov/vuln/detail/CVE-2025-1550

reference_url	https://github.com/advisories/GHSA-48g7-3x6r-xfhp
reference_id	GHSA-48g7-3x6r-xfhp
reference_type
scores
url	https://github.com/advisories/GHSA-48g7-3x6r-xfhp

reference_url

https://github.com/keras-team/keras/security/advisories/GHSA-48g7-3x6r-xfhp

reference_id

GHSA-48g7-3x6r-xfhp

reference_type

scores

value	7.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/keras-team/keras/security/advisories/GHSA-48g7-3x6r-xfhp

Weaknesses

cwe_id	94
name	Improper Control of Generation of Code ('Code Injection')
description	The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

Exploits

date_added	2025-07-16
description	Keras 2.15 - Remote Code Execution (RCE)
required_action	`null`
due_date	`null`
notes	`null`
known_ransomware_campaign_use	`false`
source_date_published	2025-07-16
exploit_type	remote
platform	python
source_date_updated	2025-07-16
data_source	Exploit-DB
source_url

Severity_range_score 7.0 - 9.8

Exploitability 0.5

Weighted_severity 8.8

Risk_score 4.4

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gu8d-jjtb-zuau

Vulnerability Instance