Aller au contenu

Vulnérabilités de Red Hat Migration Toolkit for Virtualization

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-114406 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 6.8 Moyenne 21 oct. 2026
CVE-2026-92982 A flaw was found in Ansible Operator Plugins 8.5 Élevée 15 oct. 2026
CVE-2026-89091 Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution 8.8 Élevée 8 oct. 2026
CVE-2026-11332 Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution 7.8 Élevée 5 juin 2026
CVE-2026-8643 pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved… 4.1 Moyenne 1 juin 2026
CVE-2026-44432 urllib3 is an HTTP client library for Python 8.9 Élevée 13 mai 2026
CVE-2026-40895 follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows… 6.9 Moyenne 21 avr. 2026
CVE-2026-34986 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including… 7.5 Élevée 6 avr. 2026
CVE-2026-34742 The Go MCP SDK used Go's standard encoding/json 7.6 Élevée 2 avr. 2026
CVE-2026-33186 gRPC-Go is the Go language implementation of gRPC 9.1 Critique 20 mars 2026
CVE-2026-30922 pyasn1 is a generic ASN.1 library for Python 7.5 Élevée 18 mars 2026
CVE-2026-27896 The Go MCP SDK used Go's standard encoding/json.Unmarshal for JSON-RPC and MCP protocol message parsing in versions… 7.0 Élevée 26 févr. 2026
CVE-2026-1615 Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of… 9.8 Critique 9 févr. 2026
CVE-2025-61140 The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution 9.8 Critique 28 janv. 2026
CVE-2026-24049 wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427 7.1 Élevée 22 janv. 2026
CVE-2025-13465 The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution 6.9 Moyenne 21 janv. 2026
CVE-2025-56005 An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via… 9.8 Critique 20 janv. 2026
CVE-2026-23490 pyasn1 is a generic ASN.1 library for Python 7.5 Élevée 16 janv. 2026
CVE-2026-22029 React Router is a router for React 8.0 Élevée 10 janv. 2026
CVE-2025-61686 React Router is a router for React 9.1 Critique 10 janv. 2026
CVE-2026-21441 urllib3 is an HTTP client library for Python 8.9 Élevée 7 janv. 2026
CVE-2024-11831 Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript 5.4 Moyenne 10 févr. 2025

Autres produits Red Hat