Red Hat Security Advisory

RHSA-2025:22068

RHTAS 1.3.1 - Tech Preview Release of Model Transparency

Released 2025-11-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/model-transparency-rhel9

Fixes 1 record

TI-2025-31626 CVE-2025-49655 · GHSA-cvhh-q5g5-qprp

Deserialization of untrusted data in keras-team Keras

HIGH 82

Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to r…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0075 Published 2025-10-17 Fixed in 3.11.3 CWE-502