Vulnerabilities of Red Hat Red Hat Migration Toolkit for Applications 8.2

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-13676	fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs	7.5 High	Jun 29, 2026
CVE-2026-48746	vLLM is an inference and serving engine for large language models (LLMs)	9.1 Critical	Jun 22, 2026
CVE-2026-44727	Jupyter Server is the backend for Jupyter web applications	9.3 Critical	Jun 22, 2026
CVE-2026-34993	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python	6.4 Medium	Jun 2, 2026
CVE-2026-8643	pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved…	4.1 Medium	Jun 1, 2026
CVE-2026-45292	opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing…	5.3 Medium	May 28, 2026
CVE-2026-48526	PyJWT is a JSON Web Token implementation in Python	7.4 High	May 28, 2026
CVE-2026-48710	Exploited Kludex Starlette HTTP Request/Response Smuggling Vulnerability	6.5 Medium	May 26, 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critical	May 22, 2026
CVE-2026-42561	Python-Multipart is a streaming multipart parser for Python	7.5 High	May 13, 2026
CVE-2026-44432	urllib3 is an HTTP client library for Python	8.9 High	May 13, 2026
CVE-2026-42266	JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook…	8.8 High	May 13, 2026
CVE-2026-42557	jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook…	8.6 High	May 13, 2026
CVE-2026-33811	When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…	7.5 High	May 7, 2026
CVE-2026-39820	Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion…	7.5 High	May 7, 2026
CVE-2026-42499	Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322	7.5 High	May 7, 2026
CVE-2026-33079	In versions 3.0.0a1 through 3.2.0 of Mistune, there is a ReDoS (Regular Expression Denial of Service) vulnerability in…	8.7 High	May 6, 2026
CVE-2026-40110	Jupyter Server is the backend for Jupyter web applications	7.6 High	May 5, 2026
CVE-2026-35397	Jupyter Server is the backend for Jupyter web applications	7.6 High	May 5, 2026
CVE-2026-6322	fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them…	7.5 High	May 5, 2026

Other Red Hat products