### New challenge worth $15,000

[View details](/content/challenges/1LPL6ZJQapeRqKEFciOg4G/v1/rules/index.html)

##### Lilith

@lemonkiil

UNPROVEN

1 CVEs • 1 vulnerabilities • 0 fixes

Joined March 2026

Advisory Credited

May 22

[model.weights.h5: h5py.ExternalLink at Group level silently followed during load_model(), bypassing CVE-2025-9905 fix — information disclosure from arbitrary HDF5 files in keras-team / keras
CVE-2026-9337 • Medium severity • Reported 3 months ago](/content/bounties/e08fc3b8-0eb6-4e4d-bf46-c12131a56a8d/index.html)