high7.5
CVE-2026-0897
Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote…
Impact
Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory exhaustion and a crash of the Python interpreter via a crafted .keras archive containing a valid model.weights.h5 file whose dataset declares an extremely large shape.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | keras | >= 3.0.0, <= 3.12.0 | 3.12.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Keras | Keras | from 3.0.0 through 3.13.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-mgx6-5cf9-rr43
- https://github.com/keras-team/keras/security/advisories/GHSA-mgx6-5cf9-rr43
- https://nvd.nist.gov/vuln/detail/CVE-2026-0897
- https://github.com/keras-team/keras/pull/21880
- https://github.com/keras-team/keras/pull/22081
- https://github.com/keras-team/keras/commit/7360d4f0d764fbb1fa9c6408fe53da41974dd4f6
- https://github.com/keras-team/keras/commit/f704c887bf459b42769bfc8a9182f838009afddb
- https://github.com/pypa/advisory-database/tree/main/vulns/keras/PYSEC-2026-73.yaml
- https://access.redhat.com/errata/RHSA-2026:3713
- https://access.redhat.com/errata/RHSA-2026:3782
- https://access.redhat.com/errata/RHSA-2026:4271
- https://access.redhat.com/security/cve/CVE-2026-0897
- https://bugzilla.redhat.com/show_bug.cgi?id=2430027
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0897.json