Migration Toolkit for Virtualization/mtv-candidate/mtv-ova-provider-server-rhel9

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
containerd CRI checkpoint restore CDI annotation smugglingCVE-2026-53492 · GHSA-33VJ-92QQ-66HCVersion ranges need review.	github.com/containerd/containerd/v2 github.com/containerd/containerd	GoRed Hat	High	Fix reported	2026-09-10
containerd CRI server: Host memory exhaustion through Attach goroutine leakCVE-2025-64329 · GHSA-M6HQ-P25P-FFR2Version ranges need review.	github.com/containerd/containerd/v2 github.com/containerd/containerd	GoRed Hat	Medium	Fix reported	2026-09-10
Arbitrary host CRI log file read via symlink following in CRI checkpoint restoreCVE-2026-53489 · GHSA-RGH6-RFWX-V388Version ranges need review.	github.com/containerd/containerd/v2 github.com/containerd/containerd	GoRed Hat	High	Fix reported	2026-09-10
gRPC-Go has an authorization bypass via missing leading slash in :pathCVE-2026-33186 · GHSA-P77J-4MVH-X3M3Version ranges need review.	google.golang.org/grpc Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Critical	Fix reported	2026-09-10
urllib3 redirects are not disabled when retries are disabled on PoolManager instantiationCVE-2025-50181 · GHSA-PQ67-6M6Q-MJ2VVersion ranges need review.	urllib3 Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	PyPIRed Hat	Medium	Fix reported	2026-09-10
urllib3 does not control redirects in browsers and Node.jsCVE-2025-50182 · GHSA-48P4-8XCF-VXJ5Version ranges need review.	urllib3 Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	PyPIRed Hat	Medium	Fix reported	2026-09-10