RHSA-2026:95261
Vulnerability from csaf_redhat - Published: 2026-11-04 15:42 - Updated: 2026-11-13 17:36Summary
Red Hat Security Advisory: RHTAS 1.5.1 - Release of Model Transparency 1.0.6
Severity
Critical
Notes
Topic: Release of the RHTAS Model Transparency CLI image 1.0.6.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5
Details: The RHTAS Model Transparency CLI image can be used to sign and verify AI/ML workloads
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in PyJWT. When an application allows both symmetric and asymmetric signing algorithms, minor formatting variations in a public key can prevent the library from properly identifying it as an asymmetric key. Consequently, the library improperly treats the public key as a shared secret key, allowing a remote attacker to forge valid authentication tokens and bypass security controls.
9.1 (Critical)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Critical
A flaw was found in PyJWT. The library fails to identify asymmetric public keys supplied in Distinguished Encoding Rules (DER) format, inadvertently treating the public data as a shared secret in Hash-based Message Authentication Code (HMAC) operations. If an application supports both asymmetric and symmetric signing algorithms, a remote attacker knowing the public key can exploit this flaw to forge valid authentication tokens and bypass access controls.
7.4 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-102268
Threats
Impact
Important
A flaw was found in pyjwt. When verifying cryptographic keys, the raw JSON Web Key (JWK) parser fails to normalize Unicode byte-order marks (BOM). In mixed-algorithm verification environments, an attacker who knows the public key can supply a key prefixed with a byte-order mark, causing the system to misidentify the public key as a shared symmetric secret. This flaw allows an attacker to forge authenticated JSON Web Tokens (JWT) and bypass authentication controls.
7.4 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-102268
Threats
Impact
Important
A flaw was found in PyJWT. This vulnerability allows an unauthenticated remote attacker to bypass authentication by forging arbitrary JSON Web Tokens (JWTs). When an application allows both symmetric and asymmetric algorithms, PyJWT fails to properly validate public JSON Web Key (JWK) container representations, mistakenly accepting public key material as a symmetric Hash-based Message Authentication Code (HMAC) secret. As a result, an attacker with knowledge of the public key can generate validly signed tokens with arbitrary authenticated claims.
7.4 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-102268
Threats
Impact
Important
A flaw was found in dnspython. A remote attacker can cause a Denial of Service (DoS) by sending a specially crafted Domain Name System (DNS) message containing excessive compression pointer chains. Because the parser does not enforce a hop limit during name decompression, processing these malformed messages leads to excessive CPU utilization and application unresponsiveness.
7.5 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-102268
Threats
Impact
Important
A flaw was found in pyasn1. A remote attacker could trigger a Denial of Service (DoS) by sending specially crafted Abstract Syntax Notation One (ASN.1) data containing colliding tag identifiers during schemaless decoding. Processing these inputs causes inefficient container lookups that consume excessive CPU resources, leading to service degradation or unresponsiveness.
7.5 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-102268
Threats
Impact
Important
A flaw was found in pyasn1. A remote attacker can cause a Denial of Service (DoS) by providing specially crafted ASN.1 (Abstract Syntax Notation One) encoded data containing numerous fragments. During the decoding of constructed strings or indefinite-length values, the library repeatedly concatenates incoming data chunks, causing quadratic processing overhead. This excessive workload can lead to CPU resource exhaustion, rendering the application unresponsive.
7.5 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-102268
Threats
Impact
Important
A flaw was found in pyasn1. A remote attacker can cause a Denial of Service (DoS) by sending specially crafted Abstract Syntax Notation One (ASN.1) data containing multiple constructed bit string fragments. When decoding these fragments, the library repeatedly copies and shifts accumulated bit data, leading to quadratic processing time and excessive CPU consumption.
7.5 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-102268
Threats
Impact
Important
References
65 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Release of the RHTAS Model Transparency CLI image 1.0.6.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS Model Transparency CLI image can be used to sign and verify AI/ML workloads",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:95261",
"url": "https://access.redhat.com/errata/RHSA-2026:95261"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102268",
"url": "https://access.redhat.com/security/cve/CVE-2026-102268"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102271",
"url": "https://access.redhat.com/security/cve/CVE-2026-102271"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102272",
"url": "https://access.redhat.com/security/cve/CVE-2026-102272"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102273",
"url": "https://access.redhat.com/security/cve/CVE-2026-102273"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-114605",
"url": "https://access.redhat.com/security/cve/CVE-2026-114605"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-119194",
"url": "https://access.redhat.com/security/cve/CVE-2026-119194"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-119195",
"url": "https://access.redhat.com/security/cve/CVE-2026-119195"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-119196",
"url": "https://access.redhat.com/security/cve/CVE-2026-119196"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_95261.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.5.1 - Release of Model Transparency 1.0.6",
"tracking": {
"current_release_date": "2026-11-13T17:36:35+00:00",
"generator": {
"date": "2026-11-13T17:36:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.6"
}
},
"id": "RHSA-2026:95261",
"initial_release_date": "2026-11-04T15:42:45+00:00",
"revision_history": [
{
"date": "2026-11-04T15:42:45+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-11-04T15:42:54+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-11-13T17:36:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.5",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.5",
"product_id": "Red Hat Trusted Artifact Signer 1.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.5::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"product": {
"name": "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"product_id": "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"product_identification_helper": {
"purl": "pkg:oci/model-transparency-rhel9@sha256%3Aebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/model-transparency-rhel9\u0026tag=1793696578"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64",
"product": {
"name": "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64",
"product_id": "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64",
"product_identification_helper": {
"purl": "pkg:oci/model-transparency-rhel9@sha256%3Afcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702?arch=arm64\u0026repository_url=registry.redhat.io/rhtas/model-transparency-rhel9\u0026tag=1793696578"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64 as a component of Red Hat Trusted Artifact Signer 1.5",
"product_id": "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64"
},
"product_reference": "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64 as a component of Red Hat Trusted Artifact Signer 1.5",
"product_id": "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
},
"product_reference": "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-102268",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-09-28T20:40:56.952621+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT. When an application allows both symmetric and asymmetric signing algorithms, minor formatting variations in a public key can prevent the library from properly identifying it as an asymmetric key. Consequently, the library improperly treats the public key as a shared secret key, allowing a remote attacker to forge valid authentication tokens and bypass security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: PyJWT: Authentication bypass via improper public key validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Critical severity for Red Hat products because an unauthenticated remote attacker could forge valid cryptographic tokens and bypass authentication checks without knowing the private signing key. Exploitation occurs when consuming applications configure token verification to accept both symmetric and asymmetric algorithms simultaneously, allowing an asymmetric public key to be mishandled as a symmetric secret. Deployments that strictly enforce a single algorithm type or validate tokens using JSON Web Key sets do not permit this algorithm confusion and remain unaffected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102268"
},
{
"category": "external",
"summary": "RHBZ#2542685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102268",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102268"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102268",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102268"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07",
"url": "https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9"
}
],
"release_date": "2026-09-28T20:26:13.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-04T15:42:45+00:00",
"details": "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:95261"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "pyjwt: PyJWT: Authentication bypass via improper public key validation"
},
{
"cve": "CVE-2026-102271",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-09-28T20:41:35.219179+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT. The library fails to identify asymmetric public keys supplied in Distinguished Encoding Rules (DER) format, inadvertently treating the public data as a shared secret in Hash-based Message Authentication Code (HMAC) operations. If an application supports both asymmetric and symmetric signing algorithms, a remote attacker knowing the public key can exploit this flaw to forge valid authentication tokens and bypass access controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important because an attacker can forge valid JSON Web Tokens and bypass authentication mechanisms if public cryptographic keys are mistakenly treated as shared secrets. Exploitation requires a specific application scenario where both asymmetric and HMAC algorithms are concurrently permitted during signature verification and public keys are provided in raw DER binary format. Typical Red Hat product integrations do not employ this vulnerable algorithm combination or key encoding by default, which restricts the overall attack surface in standard production environments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102271"
},
{
"category": "external",
"summary": "RHBZ#2542687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102271",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102271"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102271",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102271"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/2798504fa2663364573cf2d1043d8d7fef389499",
"url": "https://github.com/jpadilla/pyjwt/commit/2798504fa2663364573cf2d1043d8d7fef389499"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-p4g4-x82p-q773",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-p4g4-x82p-q773"
}
],
"release_date": "2026-09-28T20:31:53.066000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-04T15:42:45+00:00",
"details": "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:95261"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets"
},
{
"cve": "CVE-2026-102272",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-09-28T20:51:42.409127+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542695"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyjwt. When verifying cryptographic keys, the raw JSON Web Key (JWK) parser fails to normalize Unicode byte-order marks (BOM). In mixed-algorithm verification environments, an attacker who knows the public key can supply a key prefixed with a byte-order mark, causing the system to misidentify the public key as a shared symmetric secret. This flaw allows an attacker to forge authenticated JSON Web Tokens (JWT) and bypass authentication controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because successful exploitation permits an unauthenticated remote attacker to bypass authentication and forge valid tokens, though exploitation requires specific mixed-algorithm verification settings. In Red Hat environments, exposure is restricted to services that simultaneously allow both symmetric HMAC and asymmetric signature algorithms while parsing public keys that contain byte order marks. Workloads and services that enforce single-algorithm verification policies or utilize standard asymmetric key validation routines are not susceptible to this attack.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102272"
},
{
"category": "external",
"summary": "RHBZ#2542695",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542695"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102272",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102272"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102272",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102272"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/180783930de91876bc0d601f826a1f2956057291",
"url": "https://github.com/jpadilla/pyjwt/commit/180783930de91876bc0d601f826a1f2956057291"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947"
}
],
"release_date": "2026-09-28T20:36:31.530000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-04T15:42:45+00:00",
"details": "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:95261"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling"
},
{
"cve": "CVE-2026-102273",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-09-28T20:52:12.127939+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542697"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT. This vulnerability allows an unauthenticated remote attacker to bypass authentication by forging arbitrary JSON Web Tokens (JWTs). When an application allows both symmetric and asymmetric algorithms, PyJWT fails to properly validate public JSON Web Key (JWK) container representations, mistakenly accepting public key material as a symmetric Hash-based Message Authentication Code (HMAC) secret. As a result, an attacker with knowledge of the public key can generate validly signed tokens with arbitrary authenticated claims.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as Important because an attacker with access to a public verification key can forge cryptographic tokens to bypass authentication, allowing impersonation of privileged users and unauthorized access to protected application resources. Exploitation is limited to environments where applications concurrently permit symmetric HMAC and asymmetric algorithms while passing public key containers into validation routines.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102273"
},
{
"category": "external",
"summary": "RHBZ#2542697",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542697"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102273",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102273"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102273",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102273"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95",
"url": "https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w"
}
],
"release_date": "2026-09-28T20:38:28.161000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-04T15:42:45+00:00",
"details": "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:95261"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets"
},
{
"cve": "CVE-2026-114605",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-10-22T16:42:27.165994+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2559128"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in dnspython. A remote attacker can cause a Denial of Service (DoS) by sending a specially crafted Domain Name System (DNS) message containing excessive compression pointer chains. Because the parser does not enforce a hop limit during name decompression, processing these malformed messages leads to excessive CPU utilization and application unresponsiveness.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important impact because an unauthenticated remote attacker can trigger complete CPU exhaustion and application unresponsiveness without requiring specialized access or privileges. In Red Hat enterprise deployments, the library is embedded across multiple platform services and containerized environments that process network records. Systems are primarily vulnerable when applications accept and decompress wire-format responses from untrusted external name servers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-114605"
},
{
"category": "external",
"summary": "RHBZ#2559128",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2559128"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-114605",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-114605"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-114605",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114605"
},
{
"category": "external",
"summary": "https://github.com/rthalley/dnspython/commit/b485e460c266540a1a09ca6d8d1d7b685b1d3023",
"url": "https://github.com/rthalley/dnspython/commit/b485e460c266540a1a09ca6d8d1d7b685b1d3023"
},
{
"category": "external",
"summary": "https://github.com/rthalley/dnspython/releases/tag/v2.9.0",
"url": "https://github.com/rthalley/dnspython/releases/tag/v2.9.0"
},
{
"category": "external",
"summary": "https://github.com/rthalley/dnspython/security/advisories/GHSA-45c3-73f7-pv4m",
"url": "https://github.com/rthalley/dnspython/security/advisories/GHSA-45c3-73f7-pv4m"
}
],
"release_date": "2026-10-22T16:25:32.509000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-04T15:42:45+00:00",
"details": "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:95261"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal"
},
{
"cve": "CVE-2026-119194",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-10-29T20:04:23.885333+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2563664"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1. A remote attacker could trigger a Denial of Service (DoS) by sending specially crafted Abstract Syntax Notation One (ASN.1) data containing colliding tag identifiers during schemaless decoding. Processing these inputs causes inefficient container lookups that consume excessive CPU resources, leading to service degradation or unresponsiveness.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service via hash collisions in schemaless decoding",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important impact because unauthenticated remote attackers can cause complete availability loss through CPU exhaustion against services processing untrusted ASN.1 data. The risk manifests when applications decode BER, CER, or DER structures without an explicit schema, allowing crafted colliding tag identifiers to induce quadratic computational overhead. Deployments where pyasn1 operations validate inputs against predefined schemas or operate exclusively on trusted internal data remain unaffected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-119194"
},
{
"category": "external",
"summary": "RHBZ#2563664",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2563664"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-119194",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-119194"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-119194",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119194"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/a36e3a3d067148d26197a6b7221fd0e2cde9cc86",
"url": "https://github.com/pyasn1/pyasn1/commit/a36e3a3d067148d26197a6b7221fd0e2cde9cc86"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/pull/132",
"url": "https://github.com/pyasn1/pyasn1/pull/132"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-fm9c-5rcf-2q5p",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-fm9c-5rcf-2q5p"
}
],
"release_date": "2026-10-29T19:38:14.056000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-04T15:42:45+00:00",
"details": "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:95261"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service via hash collisions in schemaless decoding"
},
{
"cve": "CVE-2026-119195",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-10-29T19:59:48.293862+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2563663"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1. A remote attacker can cause a Denial of Service (DoS) by providing specially crafted ASN.1 (Abstract Syntax Notation One) encoded data containing numerous fragments. During the decoding of constructed strings or indefinite-length values, the library repeatedly concatenates incoming data chunks, causing quadratic processing overhead. This excessive workload can lead to CPU resource exhaustion, rendering the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service via quadratic processing of fragmented ASN.1 data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important because unauthenticated remote attackers can trigger severe denial of service against network-facing services without requiring privileges or prior authentication. Red Hat environments running platforms and containerized services that parse external ASN.1 inputs are directly exposed, as processing heavily segmented streams monopolizes backend CPU cycles. The impact is confined to system availability, with no breach of data integrity or confidentiality.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-119195"
},
{
"category": "external",
"summary": "RHBZ#2563663",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2563663"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-119195",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-119195"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-119195",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119195"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/4ce00797c594b59c1fd6b86d9ebc3ba87b7ec9f9",
"url": "https://github.com/pyasn1/pyasn1/commit/4ce00797c594b59c1fd6b86d9ebc3ba87b7ec9f9"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/pull/132",
"url": "https://github.com/pyasn1/pyasn1/pull/132"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-9m75-vc3g-4x39",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-9m75-vc3g-4x39"
}
],
"release_date": "2026-10-29T19:41:37.352000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-04T15:42:45+00:00",
"details": "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:95261"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service via quadratic processing of fragmented ASN.1 data"
},
{
"cve": "CVE-2026-119196",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-10-29T20:13:17.827067+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2563666"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1. A remote attacker can cause a Denial of Service (DoS) by sending specially crafted Abstract Syntax Notation One (ASN.1) data containing multiple constructed bit string fragments. When decoding these fragments, the library repeatedly copies and shifts accumulated bit data, leading to quadratic processing time and excessive CPU consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service via constructed bit string decoding",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has classified this vulnerability as Important because an unauthenticated network attacker can cause CPU starvation and worker thread exhaustion across network-exposed services without requiring elevated privileges. Within Red Hat distributions and enterprise platforms, pyasn1 serves as an underlying ASN.1 parsing library for several automation components, identity management services, and containerized workloads. Although client-side and internal utilities experience negligible operational risk, network-facing services that ingest untrusted or schema-less ASN.1 structures are directly exposed to availability denial.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-119196"
},
{
"category": "external",
"summary": "RHBZ#2563666",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2563666"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-119196",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-119196"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-119196",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119196"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/73ba7b043cc7e92cb37f16f2c955bff93b0e6f6c",
"url": "https://github.com/pyasn1/pyasn1/commit/73ba7b043cc7e92cb37f16f2c955bff93b0e6f6c"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/pull/132",
"url": "https://github.com/pyasn1/pyasn1/pull/132"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-2qm8-x737-gmw5",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-2qm8-x737-gmw5"
}
],
"release_date": "2026-10-29T19:44:46.031000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-04T15:42:45+00:00",
"details": "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:95261"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64",
"Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service via constructed bit string decoding"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.