Skip to content
Redhat Migration Toolkit vulnerabilities
-
encode starlette, red hat exploit intelligence, openshift lightspeed +18 more +20 more
Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
CVE-2026-48710
In KEVPublic exploitFix available
EPSS 70.3%
6.5 Medium
-
immutable-js immutable, immutable-js, red hat cluster observability operator 1.5.0 +90 more +92 more
Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable
CVE-2026-29063
Fix available
8.7 High
-
redhat keycloak, red hat migration toolkit for runtimes 1 on rhel 8, mta-6.2-rhel-9 +26 more +28 more
Keycloak: path transversal in redirection validation
CVE-2024-1132
Fix available
8.1 High
-
redhat keycloak, red hat migration toolkit for applications 6, migration toolkit for applications 7 +21 more +23 more
Keycloak: redirect_uri validation bypass
CVE-2023-6291
Fix available
7.1 High
-
eclipse jetty, ietf http, http/2 +166 more +168 more
Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations
CVE-2023-44487
In KEVPublic exploitFix available
EPSS 100.0%
7.5 High
-
keycloak, redhat build of quarkus, jboss a-mq +2 more +4 more
Keycloak Untrusted Certificate Validation vulnerability
CVE-2023-1664
Fix available
6.5 Medium
-
red hat undertow, redhat build of quarkus, integration camel for spring boot +7 more +9 more
Undertow client not checking server identity presented by server certificate in https connections
CVE-2022-4492
Fix available
7.5 High
-
konveyor mig-controller, redhat migration toolkit +1 more
An incorrect default permissions vulnerability was found in the mig-controller. Due to an...
CVE-2021-3948
Fix available
6.3 Medium
-
[unknown] systemd, debian linux, redhat ceph storage +7 more +9 more
A heap use-after-free vulnerability was found in systemd before version v245-rc1, where...
CVE-2020-1712
Public exploitFix available
7.8 High