Red Hat Security Advisory

RHSA-2026:84785

RHTAS 1.4.4 - Release of Model Transparency 1.0.5

Released 2026-10-19 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Trusted Artifact Signer 1.4 registry.redhat.io/rhtas/model-transparency-rhel9

TI-2026-65303 CVE-2026-102268 · GHSA-ffc3-869f-jxw9

HIGH 80

PyJWT is a Python implementation of JSON Web Token standards.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00236 Published 2026-09-28 Partial fix · 2.14.0 CWE-347

TI-2026-65302 CVE-2026-102267 · GHSA-9v7f-9g4p-ffgj

MEDIUM 40

PyJWT is a Python implementation of JSON Web Token standards.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00159 Published 2026-09-28 Partial fix · 2.14.0 CWE-200

TI-2026-64264 CVE-2026-97689 · GHSA-vxq7-64xx-v4gw

LOW 38

urllib3 is an HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00335 Published 2026-09-29 Partial fix · 2.8.0 CWE-770

TI-2026-64262 CVE-2026-97687 · GHSA-8988-9cw3-xx77

LOW 35

urllib3 is an HTTP client library for Python.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00206 Published 2026-09-29 Partial fix · 2.8.0 CWE-295