A vulnerability categorized as problematic has been discovered in Keras up to 3.10.x. This impacts the function
enable_unsafe_deserialization
. Such manipulation leads to deserialization.
This vulnerability is traded as CVE-2025-9906. The attack may be launched remotely. There is no exploit available.
It is advisable to upgrade the affected component.