
`safe_mode=True` got its first CVEs. The Hugging Face scanner missed them.
Researchers found six zero-day vulnerabilities in ML model loading, including the first CVEs ever assigned to Keras safe_mode. Over 90% of non-security ML practitioners believed safe_mode=True prevented arbitrary code execution. It did not.

















