Database/AI/ML frameworks & serving
Keras: Deserialization of untrusted data in 3.11.0–3.11.2
CVE-2025-49655AI/ML frameworks & servingcurated
Impact
Deserialization of untrusted data in 3.11.0–3.11.2 → malicious model runs arbitrary code
Who can reach it
Customer-supplied model file
What to do
Upgrade to 3.11.3+
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.