Vassssilis/

keras-hub-whisper-fileread-poc

Responsible-disclosure PoC for a huntr report: this .keras reads a local file (/tmp/victim_secret.json) when loaded via keras.saving.load_model() at default safe_mode. Run python repro.py to reproduce. Not for malicious use.