RHSA-2026:99011
Vulnerability from csaf_redhat - Published: 2026-11-11 15:13 - Updated: 2026-11-13 17:36Summary
Red Hat Security Advisory: RHTAS 1.4.5 - Release of Model Transparency 1.0.7
Severity
Critical
Notes
Topic: Release of the RHTAS Model Transparency CLI image 1.0.7.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4
Details: The RHTAS Model Transparency CLI image can be used to sign and verify AI/ML workloads
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in PyJWT. When an application allows both symmetric and asymmetric signing algorithms, minor formatting variations in a public key can prevent the library from properly identifying it as an asymmetric key. Consequently, the library improperly treats the public key as a shared secret key, allowing a remote attacker to forge valid authentication tokens and bypass security controls.
9.1 (Critical)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Critical
A flaw was found in PyJWT. The library fails to identify asymmetric public keys supplied in Distinguished Encoding Rules (DER) format, inadvertently treating the public data as a shared secret in Hash-based Message Authentication Code (HMAC) operations. If an application supports both asymmetric and symmetric signing algorithms, a remote attacker knowing the public key can exploit this flaw to forge valid authentication tokens and bypass access controls.
7.4 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-102268
Threats
Impact
Important
A flaw was found in pyjwt. When verifying cryptographic keys, the raw JSON Web Key (JWK) parser fails to normalize Unicode byte-order marks (BOM). In mixed-algorithm verification environments, an attacker who knows the public key can supply a key prefixed with a byte-order mark, causing the system to misidentify the public key as a shared symmetric secret. This flaw allows an attacker to forge authenticated JSON Web Tokens (JWT) and bypass authentication controls.
7.4 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-102268
Threats
Impact
Important
A flaw was found in PyJWT. This vulnerability allows an unauthenticated remote attacker to bypass authentication by forging arbitrary JSON Web Tokens (JWTs). When an application allows both symmetric and asymmetric algorithms, PyJWT fails to properly validate public JSON Web Key (JWK) container representations, mistakenly accepting public key material as a symmetric Hash-based Message Authentication Code (HMAC) secret. As a result, an attacker with knowledge of the public key can generate validly signed tokens with arbitrary authenticated claims.
7.4 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-102268
Threats
Impact
Important
A flaw was found in dnspython. A remote attacker can cause a Denial of Service (DoS) by sending a specially crafted Domain Name System (DNS) message containing excessive compression pointer chains. Because the parser does not enforce a hop limit during name decompression, processing these malformed messages leads to excessive CPU utilization and application unresponsiveness.
7.5 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-102268
Threats
Impact
Important
A flaw was found in pyasn1. A remote attacker could trigger a Denial of Service (DoS) by sending specially crafted Abstract Syntax Notation One (ASN.1) data containing colliding tag identifiers during schemaless decoding. Processing these inputs causes inefficient container lookups that consume excessive CPU resources, leading to service degradation or unresponsiveness.
7.5 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-102268
Threats
Impact
Important
A flaw was found in pyasn1. A remote attacker can cause a Denial of Service (DoS) by providing specially crafted ASN.1 (Abstract Syntax Notation One) encoded data containing numerous fragments. During the decoding of constructed strings or indefinite-length values, the library repeatedly concatenates incoming data chunks, causing quadratic processing overhead. This excessive workload can lead to CPU resource exhaustion, rendering the application unresponsive.
7.5 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-102268
Threats
Impact
Important
A flaw was found in pyasn1. A remote attacker can cause a Denial of Service (DoS) by sending specially crafted Abstract Syntax Notation One (ASN.1) data containing multiple constructed bit string fragments. When decoding these fragments, the library repeatedly copies and shifts accumulated bit data, leading to quadratic processing time and excessive CPU consumption.
7.5 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-102268
Threats
Impact
Important
A flaw was found in pyasn1. A remote attacker can exploit this vulnerability by submitting specially crafted Abstract Syntax Notation One (ASN.1) data containing a binary-encoded floating-point (REAL) value with a large mantissa. Processing this input leads to quadratic decoding time and excessive CPU consumption, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-102268
Threats
Impact
Important
References
72 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Release of the RHTAS Model Transparency CLI image 1.0.7.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS Model Transparency CLI image can be used to sign and verify AI/ML workloads",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:99011",
"url": "https://access.redhat.com/errata/RHSA-2026:99011"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102268",
"url": "https://access.redhat.com/security/cve/CVE-2026-102268"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102271",
"url": "https://access.redhat.com/security/cve/CVE-2026-102271"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102272",
"url": "https://access.redhat.com/security/cve/CVE-2026-102272"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102273",
"url": "https://access.redhat.com/security/cve/CVE-2026-102273"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-114605",
"url": "https://access.redhat.com/security/cve/CVE-2026-114605"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-119194",
"url": "https://access.redhat.com/security/cve/CVE-2026-119194"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-119195",
"url": "https://access.redhat.com/security/cve/CVE-2026-119195"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-119196",
"url": "https://access.redhat.com/security/cve/CVE-2026-119196"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-119197",
"url": "https://access.redhat.com/security/cve/CVE-2026-119197"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_99011.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.4.5 - Release of Model Transparency 1.0.7",
"tracking": {
"current_release_date": "2026-11-13T17:36:37+00:00",
"generator": {
"date": "2026-11-13T17:36:37+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.6"
}
},
"id": "RHSA-2026:99011",
"initial_release_date": "2026-11-11T15:13:04+00:00",
"revision_history": [
{
"date": "2026-11-11T15:13:04+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-11-11T15:13:12+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-11-13T17:36:37+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.4",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64",
"product": {
"name": "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64",
"product_id": "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64",
"product_identification_helper": {
"purl": "pkg:oci/model-transparency-rhel9@sha256%3Af42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/model-transparency-rhel9\u0026tag=1794221044"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"product": {
"name": "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"product_id": "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/model-transparency-rhel9@sha256%3Aa1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5?arch=arm64\u0026repository_url=registry.redhat.io/rhtas/model-transparency-rhel9\u0026tag=1794221044"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64"
},
"product_reference": "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
},
"product_reference": "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-102268",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-09-28T20:40:56.952621+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT. When an application allows both symmetric and asymmetric signing algorithms, minor formatting variations in a public key can prevent the library from properly identifying it as an asymmetric key. Consequently, the library improperly treats the public key as a shared secret key, allowing a remote attacker to forge valid authentication tokens and bypass security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: PyJWT: Authentication bypass via improper public key validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Critical severity for Red Hat products because an unauthenticated remote attacker could forge valid cryptographic tokens and bypass authentication checks without knowing the private signing key. Exploitation occurs when consuming applications configure token verification to accept both symmetric and asymmetric algorithms simultaneously, allowing an asymmetric public key to be mishandled as a symmetric secret. Deployments that strictly enforce a single algorithm type or validate tokens using JSON Web Key sets do not permit this algorithm confusion and remain unaffected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102268"
},
{
"category": "external",
"summary": "RHBZ#2542685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102268",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102268"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102268",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102268"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07",
"url": "https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9"
}
],
"release_date": "2026-09-28T20:26:13.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-11T15:13:04+00:00",
"details": "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99011"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "pyjwt: PyJWT: Authentication bypass via improper public key validation"
},
{
"cve": "CVE-2026-102271",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-09-28T20:41:35.219179+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT. The library fails to identify asymmetric public keys supplied in Distinguished Encoding Rules (DER) format, inadvertently treating the public data as a shared secret in Hash-based Message Authentication Code (HMAC) operations. If an application supports both asymmetric and symmetric signing algorithms, a remote attacker knowing the public key can exploit this flaw to forge valid authentication tokens and bypass access controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important because an attacker can forge valid JSON Web Tokens and bypass authentication mechanisms if public cryptographic keys are mistakenly treated as shared secrets. Exploitation requires a specific application scenario where both asymmetric and HMAC algorithms are concurrently permitted during signature verification and public keys are provided in raw DER binary format. Typical Red Hat product integrations do not employ this vulnerable algorithm combination or key encoding by default, which restricts the overall attack surface in standard production environments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102271"
},
{
"category": "external",
"summary": "RHBZ#2542687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102271",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102271"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102271",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102271"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/2798504fa2663364573cf2d1043d8d7fef389499",
"url": "https://github.com/jpadilla/pyjwt/commit/2798504fa2663364573cf2d1043d8d7fef389499"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-p4g4-x82p-q773",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-p4g4-x82p-q773"
}
],
"release_date": "2026-09-28T20:31:53.066000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-11T15:13:04+00:00",
"details": "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99011"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets"
},
{
"cve": "CVE-2026-102272",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-09-28T20:51:42.409127+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542695"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyjwt. When verifying cryptographic keys, the raw JSON Web Key (JWK) parser fails to normalize Unicode byte-order marks (BOM). In mixed-algorithm verification environments, an attacker who knows the public key can supply a key prefixed with a byte-order mark, causing the system to misidentify the public key as a shared symmetric secret. This flaw allows an attacker to forge authenticated JSON Web Tokens (JWT) and bypass authentication controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because successful exploitation permits an unauthenticated remote attacker to bypass authentication and forge valid tokens, though exploitation requires specific mixed-algorithm verification settings. In Red Hat environments, exposure is restricted to services that simultaneously allow both symmetric HMAC and asymmetric signature algorithms while parsing public keys that contain byte order marks. Workloads and services that enforce single-algorithm verification policies or utilize standard asymmetric key validation routines are not susceptible to this attack.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102272"
},
{
"category": "external",
"summary": "RHBZ#2542695",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542695"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102272",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102272"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102272",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102272"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/180783930de91876bc0d601f826a1f2956057291",
"url": "https://github.com/jpadilla/pyjwt/commit/180783930de91876bc0d601f826a1f2956057291"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947"
}
],
"release_date": "2026-09-28T20:36:31.530000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-11T15:13:04+00:00",
"details": "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99011"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling"
},
{
"cve": "CVE-2026-102273",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-09-28T20:52:12.127939+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542697"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT. This vulnerability allows an unauthenticated remote attacker to bypass authentication by forging arbitrary JSON Web Tokens (JWTs). When an application allows both symmetric and asymmetric algorithms, PyJWT fails to properly validate public JSON Web Key (JWK) container representations, mistakenly accepting public key material as a symmetric Hash-based Message Authentication Code (HMAC) secret. As a result, an attacker with knowledge of the public key can generate validly signed tokens with arbitrary authenticated claims.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as Important because an attacker with access to a public verification key can forge cryptographic tokens to bypass authentication, allowing impersonation of privileged users and unauthorized access to protected application resources. Exploitation is limited to environments where applications concurrently permit symmetric HMAC and asymmetric algorithms while passing public key containers into validation routines.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102273"
},
{
"category": "external",
"summary": "RHBZ#2542697",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542697"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102273",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102273"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102273",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102273"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95",
"url": "https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w"
}
],
"release_date": "2026-09-28T20:38:28.161000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-11T15:13:04+00:00",
"details": "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99011"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets"
},
{
"cve": "CVE-2026-114605",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-10-22T16:42:27.165994+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2559128"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in dnspython. A remote attacker can cause a Denial of Service (DoS) by sending a specially crafted Domain Name System (DNS) message containing excessive compression pointer chains. Because the parser does not enforce a hop limit during name decompression, processing these malformed messages leads to excessive CPU utilization and application unresponsiveness.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important impact because an unauthenticated remote attacker can trigger complete CPU exhaustion and application unresponsiveness without requiring specialized access or privileges. In Red Hat enterprise deployments, the library is embedded across multiple platform services and containerized environments that process network records. Systems are primarily vulnerable when applications accept and decompress wire-format responses from untrusted external name servers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-114605"
},
{
"category": "external",
"summary": "RHBZ#2559128",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2559128"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-114605",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-114605"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-114605",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114605"
},
{
"category": "external",
"summary": "https://github.com/rthalley/dnspython/commit/b485e460c266540a1a09ca6d8d1d7b685b1d3023",
"url": "https://github.com/rthalley/dnspython/commit/b485e460c266540a1a09ca6d8d1d7b685b1d3023"
},
{
"category": "external",
"summary": "https://github.com/rthalley/dnspython/releases/tag/v2.9.0",
"url": "https://github.com/rthalley/dnspython/releases/tag/v2.9.0"
},
{
"category": "external",
"summary": "https://github.com/rthalley/dnspython/security/advisories/GHSA-45c3-73f7-pv4m",
"url": "https://github.com/rthalley/dnspython/security/advisories/GHSA-45c3-73f7-pv4m"
}
],
"release_date": "2026-10-22T16:25:32.509000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-11T15:13:04+00:00",
"details": "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99011"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal"
},
{
"cve": "CVE-2026-119194",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-10-29T20:04:23.885333+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2563664"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1. A remote attacker could trigger a Denial of Service (DoS) by sending specially crafted Abstract Syntax Notation One (ASN.1) data containing colliding tag identifiers during schemaless decoding. Processing these inputs causes inefficient container lookups that consume excessive CPU resources, leading to service degradation or unresponsiveness.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service via hash collisions in schemaless decoding",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important impact because unauthenticated remote attackers can cause complete availability loss through CPU exhaustion against services processing untrusted ASN.1 data. The risk manifests when applications decode BER, CER, or DER structures without an explicit schema, allowing crafted colliding tag identifiers to induce quadratic computational overhead. Deployments where pyasn1 operations validate inputs against predefined schemas or operate exclusively on trusted internal data remain unaffected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-119194"
},
{
"category": "external",
"summary": "RHBZ#2563664",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2563664"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-119194",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-119194"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-119194",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119194"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/a36e3a3d067148d26197a6b7221fd0e2cde9cc86",
"url": "https://github.com/pyasn1/pyasn1/commit/a36e3a3d067148d26197a6b7221fd0e2cde9cc86"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/pull/132",
"url": "https://github.com/pyasn1/pyasn1/pull/132"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-fm9c-5rcf-2q5p",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-fm9c-5rcf-2q5p"
}
],
"release_date": "2026-10-29T19:38:14.056000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-11T15:13:04+00:00",
"details": "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99011"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service via hash collisions in schemaless decoding"
},
{
"cve": "CVE-2026-119195",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-10-29T19:59:48.293862+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2563663"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1. A remote attacker can cause a Denial of Service (DoS) by providing specially crafted ASN.1 (Abstract Syntax Notation One) encoded data containing numerous fragments. During the decoding of constructed strings or indefinite-length values, the library repeatedly concatenates incoming data chunks, causing quadratic processing overhead. This excessive workload can lead to CPU resource exhaustion, rendering the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service via quadratic processing of fragmented ASN.1 data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important because unauthenticated remote attackers can trigger severe denial of service against network-facing services without requiring privileges or prior authentication. Red Hat environments running platforms and containerized services that parse external ASN.1 inputs are directly exposed, as processing heavily segmented streams monopolizes backend CPU cycles. The impact is confined to system availability, with no breach of data integrity or confidentiality.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-119195"
},
{
"category": "external",
"summary": "RHBZ#2563663",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2563663"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-119195",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-119195"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-119195",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119195"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/4ce00797c594b59c1fd6b86d9ebc3ba87b7ec9f9",
"url": "https://github.com/pyasn1/pyasn1/commit/4ce00797c594b59c1fd6b86d9ebc3ba87b7ec9f9"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/pull/132",
"url": "https://github.com/pyasn1/pyasn1/pull/132"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-9m75-vc3g-4x39",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-9m75-vc3g-4x39"
}
],
"release_date": "2026-10-29T19:41:37.352000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-11T15:13:04+00:00",
"details": "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99011"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service via quadratic processing of fragmented ASN.1 data"
},
{
"cve": "CVE-2026-119196",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-10-29T20:13:17.827067+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2563666"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1. A remote attacker can cause a Denial of Service (DoS) by sending specially crafted Abstract Syntax Notation One (ASN.1) data containing multiple constructed bit string fragments. When decoding these fragments, the library repeatedly copies and shifts accumulated bit data, leading to quadratic processing time and excessive CPU consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service via constructed bit string decoding",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has classified this vulnerability as Important because an unauthenticated network attacker can cause CPU starvation and worker thread exhaustion across network-exposed services without requiring elevated privileges. Within Red Hat distributions and enterprise platforms, pyasn1 serves as an underlying ASN.1 parsing library for several automation components, identity management services, and containerized workloads. Although client-side and internal utilities experience negligible operational risk, network-facing services that ingest untrusted or schema-less ASN.1 structures are directly exposed to availability denial.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-119196"
},
{
"category": "external",
"summary": "RHBZ#2563666",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2563666"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-119196",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-119196"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-119196",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119196"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/73ba7b043cc7e92cb37f16f2c955bff93b0e6f6c",
"url": "https://github.com/pyasn1/pyasn1/commit/73ba7b043cc7e92cb37f16f2c955bff93b0e6f6c"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/pull/132",
"url": "https://github.com/pyasn1/pyasn1/pull/132"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-2qm8-x737-gmw5",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-2qm8-x737-gmw5"
}
],
"release_date": "2026-10-29T19:44:46.031000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-11T15:13:04+00:00",
"details": "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99011"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service via constructed bit string decoding"
},
{
"cve": "CVE-2026-119197",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-10-30T16:28:49.630034+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2564170"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1. A remote attacker can exploit this vulnerability by submitting specially crafted Abstract Syntax Notation One (ASN.1) data containing a binary-encoded floating-point (REAL) value with a large mantissa. Processing this input leads to quadratic decoding time and excessive CPU consumption, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service via quadratic complexity in binary REAL decoding",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important because unauthenticated remote attackers can cause significant denial of service via CPU starvation in network services that parse untrusted ASN.1 data. While the pyasn1 library is widely packaged across Red Hat Enterprise Linux and containerized application stacks, practical risk requires that an exposed application accepts external input and processes binary-encoded floating-point definitions without schema restrictions. Services handling such untrusted input synchronously within worker threads are primarily vulnerable to CPU exhaustion and availability degradation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-119197"
},
{
"category": "external",
"summary": "RHBZ#2564170",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2564170"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-119197",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-119197"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-119197",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119197"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/ce3ec3390784780a530047e0e77be5ff457636a4",
"url": "https://github.com/pyasn1/pyasn1/commit/ce3ec3390784780a530047e0e77be5ff457636a4"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/pull/132",
"url": "https://github.com/pyasn1/pyasn1/pull/132"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-mm57-4v3p-rchx",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-mm57-4v3p-rchx"
}
],
"release_date": "2026-10-29T19:48:52.470000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-11T15:13:04+00:00",
"details": "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99011"
},
{
"category": "workaround",
"details": "--- CME Mitigation Guidance (2026-11-03) ---\nDisclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nThe highest-value action is to eliminate iterative per-octet bit-shifting and byte slicing in pyasn1 binary REAL mantissa decoding in favor of linear-time integer conversion: upgrade to pyasn1 0.6.5 (or the corresponding fixed Red Hat builds), which replace the iterative per-octet shifting, bitwise OR, and byte slicing loop with a single linear-time int.from_bytes call, closing crafted ASN.1 payload containing binary-encoded REAL with a large mantissa. Until patched, this is a concern on Applications parsing untrusted ASN.1 input with pyasn1 BER, CER, or DER decoding, so Reject or strictly enforce size limits on untrusted ASN.1 inputs that may contain REAL values. As a compensating measure, Enforce RLIMIT_CPU limits on decoding processes using ulimit or prlimit to terminate workers trapped in quadratic bit-shifting and slicing loops, Impose parsing timeouts or computational limits on decoding operations to bound worker hang time from quadratic mantissa processing, and Throttle client request volume and connections to impede sustained CPU starvation across worker threads. These controls limit blast radius and contain exploitation, but they do not fix the underlying quadratic complexity defect \u2014 apply the upstream patch to fully remediate.\n\nHighest-impact CME: CME-114 Process Resource Limits (ulimit/prlimit) (medium)",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service via quadratic complexity in binary REAL decoding"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.