Keras Deserialization Attack

https://jfrog.com/blog/keras-safe_mode-bypass-vulnerability/ A keras file being loaded can deserialize the lambda layers which exist in the model and reveal marshalled python code.