Red Hat Security AdvisoryRHSA-2026:4271
RHTAS 1.3.2 - Tech Preview Release of Model Transparency
Released 2026-03-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/model-transparency-rhel9
Fixes 6 records
Priority HIGH 70
Keras version 3.11.3 is affected by a path traversal vulnerability in the keras.utils.get_file() function when extracting tar archives.
CVSS 3.0HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.0071 · Published 2025-11-28 · Fixed CWE-22
Priority MEDIUM 64
wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.0035 · Published 2026-01-22 · Partial fix · 0.46.2 CWE-22
Priority MEDIUM 50
urllib3 is an HTTP client library for Python.
CVSS 4.0HIGH 8.9· Network · No auth · No interaction · EPSS 0.02922 · Published 2026-01-07 · Partial fix · 2.6.3 CWE-409
Priority MEDIUM 46
urllib3 is a user-friendly HTTP client library for Python.
CVSS 4.0HIGH 8.9· Network · No auth · No interaction · EPSS 0.00731 · Published 2025-12-05 · Partial fix · 2.6.0 CWE-770
Priority MEDIUM 40
urllib3 is a user-friendly HTTP client library for Python.
CVSS 4.0HIGH 8.9· Network · No auth · No interaction · EPSS 0.00731 · Published 2025-12-05 · Partial fix · 2.6.0 CWE-409
Priority LOW 31
Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory e…
CVSS 4.0HIGH 7.1· Network · No auth · User interaction · EPSS 0.0033 · Published 2026-01-15 · Partial fix · 3.12.1, 3.13.2 CWE-770
THREATIST.IORead the docs