AINewsnow

safe_mode=True does nothing for a .h5 Keras model: a static check for CVE-2025-9905

Keras added safe_mode=True to stop a model file from running code when you load it. It only ever applied to the newer .keras v3 format. For the older .h5 / .hdf5 format, Model.load_model ignored the flag, so a Lambda layer's stored function ran on load even when you asked for safe mode. That is CVE…

Read the full story at DEV Community — Machine Learning ↗

Timeline · 1 report

  1. 2026-10-18 10:20 · DEV Community — Machine Learning
    safe_mode=True does nothing for a .h5 Keras model: a static check for CVE-2025-9905

More stories

  1. DeepSeek releases MIT-licensed V4.1-Flash-1017 with improved agentic coding — Vercel Blog
  2. NVIDIA RTX Spark Laptops Launch Globally With Local AI Agent Support — NVIDIA Blog
  3. MOSS-Image gains traction with fast generation and ecosystem support — r/StableDiffusion
  4. Amazon launches Bee Frontier AI wearable amid privacy concerns — CNBC Technology
  5. Anthropic pitches AI safety bill to US lawmakers — Politico Technology
  6. FLUX 3 Klein and Qwen Image 2.1 face user scrutiny over quality and workflow issues — r/StableDiffusion
  7. Anthropic Consults Law Firms to Develop AI Negotiation Agents — Techmeme
  8. Rokid opens Hong Kong flagship store with automated retail experience — South China Morning Post Tech

Get the daily brief of stories like this at 6:30 every morning →