Allowlist Keras 3.10.0 CVE-2025-8747 vulnerability for TensorFlow 2.19 (#5180)

training containers to fix ECR Enhanced Scan test failures.

Co-authored-by: Bhanu Teja Goshikonda <[email protected]>

Author: bhanutejagk

tensorflow/training/docker/2.19/py3/Dockerfile.sagemaker.cpu.os_scan_allowlist.json

@@ -129,5 +129,32 @@
       "title": "CVE-2024-37890 - ws, ws",
       "reason_to_ignore": "N/A"
     }
+  ],
+  "keras": [
+    {
+      "description": "A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted `.keras` model archive.",
+      "vulnerability_id": "CVE-2025-8747",
+      "name": "CVE-2025-8747",
+      "package_name": "keras",
+      "package_details": {
+        "file_path": "/usr/local/lib/python3.12/site-packages/keras-3.10.0.dist-info/METADATA",
+        "name": "keras",
+        "package_manager": "PYTHON",
+        "version": "3.10.0",
+        "release": null
+      },
+      "remediation": { "recommendation": { "text": "None Provided" } },
+      "cvss_v3_score": 7.8,
+      "cvss_v30_score": 0.0,
+      "cvss_v31_score": 7.8,
+      "cvss_v2_score": 0.0,
+      "cvss_v3_severity": "HIGH",
+      "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-8747",
+      "source": "NVD",
+      "severity": "HIGH",
+      "status": "ACTIVE",
+      "title": "CVE-2025-8747 - keras",
+      "reason_to_ignore": "N/A"
+    }
   ]
 }

tensorflow/training/docker/2.19/py3/cu125/Dockerfile.sagemaker.gpu.os_scan_allowlist.json

@@ -129,5 +129,32 @@
       "title": "CVE-2024-37890 - ws, ws",
       "reason_to_ignore": "N/A"
     }
+  ],
+  "keras": [
+    {
+      "description": "A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted `.keras` model archive.",
+      "vulnerability_id": "CVE-2025-8747",
+      "name": "CVE-2025-8747",
+      "package_name": "keras",
+      "package_details": {
+        "file_path": "/usr/local/lib/python3.12/site-packages/keras-3.10.0.dist-info/METADATA",
+        "name": "keras",
+        "package_manager": "PYTHON",
+        "version": "3.10.0",
+        "release": null
+      },
+      "remediation": { "recommendation": { "text": "None Provided" } },
+      "cvss_v3_score": 7.8,
+      "cvss_v30_score": 0.0,
+      "cvss_v31_score": 7.8,
+      "cvss_v2_score": 0.0,
+      "cvss_v3_severity": "HIGH",
+      "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-8747",
+      "source": "NVD",
+      "severity": "HIGH",
+      "status": "ACTIVE",
+      "title": "CVE-2025-8747 - keras",
+      "reason_to_ignore": "N/A"
+    }
   ]
 }