Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Migration Toolkit for Applications 8/mta/mta-java-external-provider-rhel9
Red Hat
· Package
12 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocation
CVE-2026-102554 · GHSA-XXPH-C9WW-HJ94
com.google.guava:guava
Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9
Maven
Red Hat
High
Fix reported
2026-10-27
jsoup XmlTreeBuilder vulnerable to memory exhaustion through deeply nested namespace declarations
CVE-2026-75140 · GHSA-65R4-943X-97JJ
org.jsoup:jsoup
Exploit Intelligence/exploit-intelligence/agent-client-rhel9
Maven
Red Hat
High
Fix reported
2026-10-06
opentelemetry-go's baggage parsing no longer caps raw header length
CVE-2026-41178 · GHSA-5WRP-CWCJ-Q835
go.opentelemetry.io/otel/baggage
go.opentelemetry.io/otel/propagation
Go
Red Hat
Medium
Fix reported
2026-09-10
jsoup: Cleaner may expose markup with custom raw-text elements
CVE-2026-71497 · GHSA-PMHH-3W7G-XQP8
org.jsoup:jsoup
Cryostat 4/jsoup
Maven
Red Hat
Medium
Fix reported
2026-09-10
Go Net HTML parser is vulnerable to denial of service
CVE-2026-25680 · GHSA-5CV4-JP36-H3MW
Version ranges need review.
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
XPath: Boolean expression infinite loop leads to denial of service via CPU exhaustion
CVE-2026-32287 · GHSA-65XW-VW82-R86X
Version ranges need review.
github.com/antchfx/xpath
Compliance Operator/compliance/openshift-compliance-operator-bundle
Go
Red Hat
High
Fix reported
2026-09-10
golang.org/x/net/html has a Quadratic Parsing Complexity issue
CVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH
golang.org/x/net/html
golang.org/x/net
Go
Red Hat
Medium
Fix reported
2026-09-10
jansi: org.fusesource.jansi/jansi: Jansi: Heap buffer overflow leads to Denial of Service
CVE-2026-8484
Cryostat 4/jansi
Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9
Red Hat
Medium
No fix reported
Not recorded
logback-core: Logback-core: Arbitrary Code Execution via Malicious Configuration or Environment Variable
CVE-2026-13006
Migration Toolkit for Applications 8/mta/mta-cli-rhel9
Migration Toolkit for Applications 8/mta/mta-java-external-provider-rhel9
Red Hat
Medium
No fix reported
Not recorded
ch.qos.logback/logback-classic: Logback-classic: Path traversal allows arbitrary log file creation
CVE-2026-19880
Migration Toolkit for Applications 8/mta/mta-cli-rhel9
Migration Toolkit for Applications 8/mta/mta-java-external-provider-rhel9
Red Hat
Medium
No fix reported
Not recorded
org.apache.ant/ant: Apache Ant: Arbitrary file write via path traversal in ftp and scp tasks
CVE-2026-78254
Migration Toolkit for Applications 8/mta/mta-cli-rhel9
Migration Toolkit for Applications 8/mta/mta-java-external-provider-rhel9
Red Hat
Medium
No fix reported
Not recorded
ch.qos.logback/logback-classic: logback-classic: Arbitrary file write via path traversal in MDC discriminator
CVE-2026-104721
Migration Toolkit for Applications 8/mta/mta-cli-rhel9
Migration Toolkit for Applications 8/mta/mta-java-external-provider-rhel9
Red Hat
Medium
No fix reported
Not recorded
