AIsbom

A Keras model file is executable code, not data, because its config can carry marshalled CPython bytecode via Lambda layers, and Keras's safe_mode has been bypassed repeatedly, with CVEs including CVE…

AIsbom v1.3.0, a tool for scanning ML model artifacts, now flags Keras Lambda layers and embedded code objects as CRITICAL, without unmarshalling payloads. The tool also detects ONNX external-data pat…