Loading
Multi-backend Keras
Does not declare an LLM SDK itself, but depends on a package that does, 5 steps away.
Advisories that name keras as affected. Advisory records do not state an ecosystem, so packages with the same name in other ecosystems also match. For a version-exact check of your own dependencies, use Stack Check.
| Advisory | Severity | Affected | Fixed in | Published |
|---|---|---|---|---|
| CVE-2026-0897GHSA-mgx6-5cf9-rr43: Keras vulnerable to DoS via Malicious .keras Model (HDF5 Shape Bomb Causes Petabyte Allocation in KerasFileEditor) | High | >= 3.13.0, < 3.13.2 | 3.13.2 | 2026-05-06 |
Shortest path through the runtime dependencies of each latest release.
As declared in PyPI metadata for version 3.15.1. Optional extras are listed with their extra name.
Among the packages in the registry; not every dependent on PyPI.