Security
فارسی
All products

Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-api-rhel9

Red Hat · Package
16 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Sensitive headers not cleared on cross-origin redirect in net/httpCVE-2025-4673 · GO-2025-3751 stdlibCryostat 4/cryostat/cryostat-storage-rhel9 GoRed Hat Medium Fix reported
Unbounded allocation when parsing GNU sparse map in archive/tarCVE-2025-58183 · GO-2025-4014 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistecCVE-2025-22866 · GO-2025-3447 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream DecoderCVE-2026-89090 · GHSA-XMRV-PMRH-HHX2Version ranges need review. github.com/aws/aws-sdk-go-v2/aws/protocol/eventstreamgithub.com/aws/aws-sdk-go-v2/service/bedrockagentcore GoRed Hat Medium Fix reported
containerd CRI server: Host memory exhaustion through Attach goroutine leakCVE-2025-64329 · GHSA-M6HQ-P25P-FFR2Version ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd GoRed Hat Medium Fix reported
pip's fallback tar extraction doesn't check symbolic links point to extraction directoryCVE-2025-8869 · GHSA-4XH5-X5GV-QWPHVersion ranges need review. pipMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-api-rhel9 PyPIRed Hat Medium Fix reported
golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review. golang.org/x/netstdlib GoRed Hat Medium Fix reported
Excessive resource consumption when printing error string for host certificate validation in crypto/x509CVE-2025-61729 · GO-2025-4155 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat High Fix reported
Stack exhaustion in Parse in go/build/constraintCVE-2024-34158 · GO-2024-3107 stdlibMachine Deletion Remediation Operator/workload-availability/machine-deletion-remediation-rhel8-operator GoRed Hat Medium Fix reported
Incorrect results returned from Rows.Scan in database/sqlCVE-2025-47907 · GO-2025-3849 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat Medium Fix reported
Stack exhaustion in all Parse functions in go/parserCVE-2024-34155 · GO-2024-3105 stdlibBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel8 GoRed Hat Medium Fix reported
Sensitive headers incorrectly sent after cross-domain redirect in net/httpCVE-2024-45336 · GO-2025-3420 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channelCVE-2023-45287 · GO-2023-2375 stdlibCryostat 2/cryostat-tech-preview/cryostat-rhel8-operator GoRed Hat Medium Fix reported
Denial of service due to improper 100-continue handling in net/httpCVE-2024-24791 · GO-2024-2963 stdlibBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel8 GoRed Hat Medium Fix reported
Gin mishandles a wildcard at the end of an origin stringCVE-2019-25211 · GHSA-869C-J7WC-8JQVVersion ranges need review. github.com/gin-contrib/corsgithub.com/gin-gonic/gin GoRed Hat Critical Fix reported