# https://github.com/keras-team/keras/blob/v3.10.0/keras/src/layers/core/lambda_layer.py
@classmethod
def from_config(cls, config, custom_objects=None, safe_mode=None):
safe_mode = safe_mode or serialization_lib.in_safe_mode()
fn_config = config["function"]
# This is where the vulnerability occurs
if (
isinstance(fn_config, dict)
and "class_name" in fn_config
and fn_config["class_name"] == "__lambda__"
):
cls._raise_for_lambda_deserialization("function", safe_mode) # Safe mode check
inner_config = fn_config["config"]
fn = python_utils.func_load(
inner_config["code"], # Base64-encoded bytecode
defaults=inner_config["defaults"],
closure=inner_config["closure"],
)
config["function"] = fn