Informational scan, not a security audit. How this is computed.
API keys, passwords or tokens committed into the repo.
Nothing found by this check. ✓
Packages you depend on that have known security holes (CVEs).
CVE-2021-41208 Incomplete validation in boosted trees codeCVE-2023-25668 CVE-2023-25668 affecting package tensorflow for versions less than 2.11.1-1GHSA-h6gw-r52c-724r NULL Pointer Dereference and Access of Uninitialized Pointer in TensorFlowCVE-2020-15265 Segfault in `tf.quantization.quantize_and_dequantize`CVE-2021-29591 Stack overflow due to looping TFLite subgraphCVE-2021-37635 Heap out of bounds access in sparse reduction operationsCVE-2021-37637 Null pointer dereference in `CompressElement`CVE-2021-37638 Null pointer dereference in `RaggedTensorToTensor`CVE-2021-37639 Null pointer dereference and heap OOB read in operations restoring tensorsCVE-2021-37643 Null pointer dereference in `MatrixDiagPartOp`CVE-2021-37647 Null pointer dereference in `SparseTensorSliceDataset`CVE-2021-37648 Incorrect validation of `SaveV2` inputsCVE-2021-37649 Null pointer dereference in `UncompressElement`CVE-2021-37650 Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord`CVE-2021-37651 Heap buffer overflow in `FractionalAvgPoolGrad`CVE-2021-37652 Use after free in boosted trees creationCVE-2021-37654 Heap OOB and CHECK fail in `ResourceGather`CVE-2021-37655 Heap OOB in `ResourceScatterUpdate`CVE-2021-37659 Reference binding to nullptr and heap OOB in binary cwise opsCVE-2021-37663 Incomplete validation in `QuantizeV2`CVE-2021-37664 Heap OOB in boosted treesCVE-2021-37665 Incomplete validation in MKL requantizationCVE-2021-37666 Reference binding to nullptr in `RaggedTensorToVariant`CVE-2021-37667 Reference binding to nullptr in unicode encodingCVE-2021-37671 Reference binding to nullptr in map operationsYour dependencies cross-checked against the OSV vulnerability database.
PYSEC-2026-1486 Keras Directory Traversal VulnerabilityPYSEC-2021-400 TensorFlow is an open source platform for machine learning. In affected versions the code for boosted trees in TensorFlow is still missing validation. As a result, attackers can trigger denial of servPYSEC-2026-548 TensorFlow has a heap out-of-buffer read vulnerability in the QuantizeAndDequantize operationGHSA-h6gw-r52c-724r NULL Pointer Dereference and Access of Uninitialized Pointer in TensorFlowGHSA-r6jx-9g48-2r5r Arbitrary code execution due to YAML deserializationPYSEC-2025-123 The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True.
One can create a specially crafted .h5/.hdf5 model archive that, when loaded via ModePYSEC-2026-1487 Keras is vulnerable to arbitrary local file loading and Server-Side Request ForgeryPYSEC-2026-2324 Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in `keras/src/utils/file_utils.py`. The functions `filter_safe_tarinfos()` and `filtPYSEC-2026-2546 Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight LoadingPYSEC-2026-2547 Keras has an untrusted deserialization vulnerabilityPYSEC-2026-3629 Keras: HDF5 virtual datasets can disclose local filesPYSEC-2026-3631 Keras: Lambda deserialization can bypass safe mode and execute codePYSEC-2026-3632 Keras: DiskIOStore permits path traversal through crafted layer namesPYSEC-2026-3633 Keras: HDF5 links can disclose local file contentsPYSEC-2026-3634 Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle dataPYSEC-2026-73 Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DGHSA-36fq-jgmw-4r9c Keras is vulnerable to Deserialization of Untrusted DataGHSA-c9rc-mg46-23w3 Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionalityPYSEC-2020-138 In Tensorflow before version 2.4.0, an attacker can pass an invalid `axis` value to `tf.quantization.quantize_and_dequantize`. This results in accessing a dimension outside the rank of the input tensoPYSEC-2020-139 In Tensorflow before version 2.4.0, when the `boxes` argument of `tf.image.crop_and_resize` has a very large value, the CPU kernel implementation receives it as a C++ `nan` floating point value. AttemPYSEC-2020-140 In affected versions of TensorFlow the tf.raw_ops.DataFormatVecPermute API does not validate the src_format and dst_format attributes. The code assumes that these two arguments define a permutation ofPYSEC-2020-254 In affected versions of TensorFlow under certain cases a saved model can trigger use of uninitialized values during code execution. This is caused by having tensor buffers be filled with the default vPYSEC-2020-255 In affected versions of TensorFlow the tf.raw_ops.ImmutableConst operation returns a constant tensor created from a memory mapped file which is assumed immutable. However, if the type of the tensor isPYSEC-2020-256 In affected versions of TensorFlow running an LSTM/GRU model where the LSTM/GRU layer receives an input with zero-length results in a CHECK failure when using the CUDA backend. This can result in a quPYSEC-2020-257 In affected versions of TensorFlow under certain cases, loading a saved model can result in accessing uninitialized memory while building the computation graph. The MakeEdge function creates an edge bCode that can be exploited: injection, hardcoded credentials and similar.
Nothing found by this check. ✓
Packages that look intentionally malicious: typosquats, sneaky install scripts.
Nothing found by this check. ✓
A signal about how the project is maintained — not a vulnerability in your code. It doesn’t affect the verdict above.
Maintenance & supply-chain hygiene. A signal about the project, not a vulnerability in your code.
This check didn’t finish — that’s not the same as “clean.” Try Check again above.