Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory exhaustion and a crash of the Python interpreter via a crafted .keras archive containing a valid model.weights.h5 file whose dataset declares an extremely large shape.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras
    3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through
    memory exhaustion and a crash of the Python interpreter via a crafted .keras archive containing a valid
    model.weights.h5 file whose dataset declares an extremely large shape. (CVE-2026-0897)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras     3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through     memory exhaustion and a crash of the Python interpreter via a crafted .keras archive containing a valid     model.weights.h5 file whose dataset declares an extremely large shape. (CVE-2026-0897)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
441301	SCA: security update for keras (GHSA-mgx6-5cf9-rr43)	Tenable Cloud Security	SCA Checks	Local	high
441301	SCA: security update for keras (GHSA-mgx6-5cf9-rr43)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
291304	Linux Distros Unpatched Vulnerability : CVE-2026-0897	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-0897

high

Tenable Plugins

high

high

high