github.com/kubev2v/migration-planner
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Openshift Migration Advisor lacks proper authorization and filtering for its DELETE /api/v1/sources API | github.com/kubev2v/migration-planner | Go | Critical | Fix reported | |
| Openshift Migration Advisor agent-API fails to validate JWT source_id claim, allowing cross-tenant data manipulation | github.com/kubev2v/migration-planner | Go | Critical | Fix reported | |
| Openshift Migration Advisor: Broken access control in migration-planner image-url endpoint exposes other users' OVA images and agent JWTs | github.com/kubev2v/migration-planner | Go | Critical | Fix reported | |
| Openshift Migration Advisor: Improper input sanitization allows specially crafted RVTools .xlsx files to include malicious SQL commands | github.com/kubev2v/migration-planner | Go | Critical | Fix reported |