{"id":"GHSA-pwq7-2gvj-vg9v","summary":"Duplicate Advisory: Keras safe mode bypass vulnerability","details":"### Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-c9rc-mg46-23w3. This link is maintained to preserve external references.\n\n### Original Description\nA safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted `.keras` model archive.","modified":"2025-08-12T19:34:14.243935Z","published":"2025-08-11T09:30:36Z","withdrawn":"2025-08-12T19:24:04Z","database_specific":{"cwe_ids":["CWE-502"],"severity":"HIGH","github_reviewed":true,"github_reviewed_at":"2025-08-11T23:08:38Z","nvd_published_at":"2025-08-11T08:15:26Z"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8747"},{"type":"WEB","url":"https://github.com/keras-team/keras/pull/21429"},{"type":"WEB","url":"https://github.com/keras-team/keras/commit/713172ab56b864e59e2aa79b1a51b0e728bba858"},{"type":"PACKAGE","url":"https://github.com/keras-team/keras"},{"type":"WEB","url":"https://jfrog.com/blog/keras-safe_mode-bypass-vulnerability"}],"affected":[{"package":{"name":"keras","ecosystem":"PyPI","purl":"pkg:pypi/keras"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.11.0"}]}],"versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.5","3.1.0","3.1.1","3.10.0","3.2.0","3.2.1","3.3.0","3.3.1","3.3.2","3.3.3","3.4.0","3.4.1","3.5.0","3.6.0","3.7.0","3.8.0","3.9.0","3.9.1","3.9.2"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/08/GHSA-pwq7-2gvj-vg9v/GHSA-pwq7-2gvj-vg9v.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/R:A"}]}