RHSA-2026:83662

Vulnerability from csaf_redhat - Published: 2026-10-15 21:17 - Updated: 2026-10-16 00:56
Summary
Red Hat Security Advisory: MTV RHEL9 Images
Severity
Important
Notes
Topic: Updated Release packages that fix several bugs and add various enhancements are now available.
Details: Migration Toolkit for Virtualization Images
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-50162

A flaw was found in oras-go. The file content store, intended to confine writes to a specified working directory, does not properly account for symbolic link (symlink) traversal. A remote attacker, by providing a specially crafted blob title, could exploit this vulnerability to create files outside the intended working directory. This filesystem boundary bypass allows for arbitrary file creation, potentially leading to unauthorized data modification or system compromise depending on the runtime environment.

5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products
Product Identifier Version Remediation
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64 —
Threats
Impact Moderate
CVE-2026-56852

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Affected products
Product Identifier Version Remediation
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64 —
Workaround
Threats
Impact Important
CVE-2026-59887

A flaw was found in linkify-it, a library for recognizing links. A remote attacker could exploit this vulnerability by providing specially crafted user text. The mailto: schema validator, when processing this input, can be repeatedly invoked, leading to excessive CPU consumption. This can result in a Denial of Service (DoS) for the affected system.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1333 - Inefficient Regular Expression Complexity
Affected products
Product Identifier Version Remediation
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64 —
Workaround
Threats
Impact Important
CVE-2026-84445

A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-125 - Out-of-bounds Read
Affected products
Fixed 1 product, the same list as for CVE-2026-50162
Known not affected 13 products, the same list as for CVE-2026-50162
Threats
Impact Important
CVE-2026-88031

A flaw was found in go.mongodb.org/mongo-driver for version < 1.17.10 and < 2.9.1. Improper handling of data query elements in the GridFS component can lead to a file identifier being misinterpreted as a query. An authenticated user can exploit this to delete all GridFS file chunks, making stored file content unreadable, resulting in a denial of service.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CWE-1287 - Improper Validation of Specified Type of Input
Affected products
Product Identifier Version Remediation
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64 —
Workaround
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:83662 self
https://access.redhat.com/security/cve/CVE-2026-50162 external
https://access.redhat.com/security/cve/CVE-2026-56852 external
https://access.redhat.com/security/cve/CVE-2026-59887 external
https://access.redhat.com/security/cve/CVE-2026-84445 external
https://access.redhat.com/security/cve/CVE-2026-88031 external
https://access.redhat.com/security/updates/classi… external
https://docs.redhat.com/en/documentation/migratio… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-50162 self
https://bugzilla.redhat.com/show_bug.cgi?id=2499694 external
https://www.cve.org/CVERecord?id=CVE-2026-50162 external
https://nvd.nist.gov/vuln/detail/CVE-2026-50162 external
https://github.com/oras-project/oras-go/security/… external
https://access.redhat.com/security/cve/CVE-2026-56852 self
https://bugzilla.redhat.com/show_bug.cgi?id=2504233 external
https://www.cve.org/CVERecord?id=CVE-2026-56852 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56852 external
https://go.dev/cl/794100 external
https://go.dev/issue/80142 external
https://pkg.go.dev/vuln/GO-2026-5970 external
https://access.redhat.com/security/cve/CVE-2026-59887 self
https://bugzilla.redhat.com/show_bug.cgi?id=2498146 external
https://www.cve.org/CVERecord?id=CVE-2026-59887 external
https://nvd.nist.gov/vuln/detail/CVE-2026-59887 external
https://github.com/markdown-it/linkify-it/commit/… external
https://github.com/markdown-it/linkify-it/release… external
https://github.com/markdown-it/linkify-it/securit… external
https://access.redhat.com/security/cve/CVE-2026-84445 self
https://bugzilla.redhat.com/show_bug.cgi?id=2533175 external
https://www.cve.org/CVERecord?id=CVE-2026-84445 external
https://nvd.nist.gov/vuln/detail/CVE-2026-84445 external
https://github.com/grpc/grpc-go/commit/3822494d8e… external
https://github.com/grpc/grpc-go/commit/8668b69c16… external
https://github.com/grpc/grpc-go/commit/93e31b4854… external
https://github.com/grpc/grpc-go/issues/9354 external
https://github.com/grpc/grpc-go/pull/9365 external
https://github.com/grpc/grpc-go/pull/9366 external
https://github.com/grpc/grpc-go/pull/9367 external
https://github.com/grpc/grpc-go/releases/tag/v1.82.2 external
https://github.com/grpc/grpc-go/releases/tag/v1.83.2 external
https://github.com/grpc/grpc-go/security/advisori… external
https://access.redhat.com/security/cve/CVE-2026-88031 self
https://bugzilla.redhat.com/show_bug.cgi?id=2531587 external
https://www.cve.org/CVERecord?id=CVE-2026-88031 external
https://nvd.nist.gov/vuln/detail/CVE-2026-88031 external
https://jira.mongodb.org/browse/GODRIVER-4081 external
https://www.mongodb.com/community/forums/t/mongod… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated Release packages that fix several bugs and add various enhancements are now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Migration Toolkit for Virtualization Images",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:83662",
        "url": "https://access.redhat.com/errata/RHSA-2026:83662"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-50162",
        "url": "https://access.redhat.com/security/cve/CVE-2026-50162"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56852",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56852"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59887",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59887"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84445",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84445"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-88031",
        "url": "https://access.redhat.com/security/cve/CVE-2026-88031"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/migration_toolkit_for_virtualization",
        "url": "https://docs.redhat.com/en/documentation/migration_toolkit_for_virtualization"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83662.json"
      }
    ],
    "title": "Red Hat Security Advisory: MTV RHEL9 Images",
    "tracking": {
      "current_release_date": "2026-10-16T00:56:45+00:00",
      "generator": {
        "date": "2026-10-16T00:56:45+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.2"
        }
      },
      "id": "RHSA-2026:83662",
      "initial_release_date": "2026-10-15T21:17:32+00:00",
      "revision_history": [
        {
          "date": "2026-10-15T21:17:32+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-15T21:17:41+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-16T00:56:45+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Migration Toolkit for Virtualization 2.11",
                "product": {
                  "name": "Migration Toolkit for Virtualization 2.11",
                  "product_id": "Migration Toolkit for Virtualization 2.11",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:migration_toolkit_virtualization:2.11::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Migration Toolkit for Virtualization"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-api-rhel9@sha256%3A1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9\u0026tag=1791228807"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-cli-download-rhel9@sha256%3Aebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9\u0026tag=1791228993"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-console-plugin-rhel9@sha256%3A9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9\u0026tag=1791616415"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-controller-rhel9@sha256%3Aacbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9\u0026tag=1791228801"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-must-gather-rhel9@sha256%3Af6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9\u0026tag=1791228926"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-rhel9-operator@sha256%3A4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator\u0026tag=1791228757"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-operator-bundle@sha256%3Ae63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle\u0026tag=1791616914"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-ova-proxy-rhel9@sha256%3A25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9\u0026tag=1791228762"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-openstack-populator-rhel9@sha256%3Ad4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9\u0026tag=1791228808"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-ova-provider-server-rhel9@sha256%3A06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9\u0026tag=1791228991"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-populator-controller-rhel9@sha256%3A1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9\u0026tag=1791228828"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-validation-rhel9@sha256%3Abe057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9\u0026tag=1791229031"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-virt-v2v-rhel9@sha256%3A688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9\u0026tag=1791229014"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-vsphere-xcopy-volume-populator-rhel9@sha256%3A8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9\u0026tag=1791228817"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64 as a component of Migration Toolkit for Virtualization 2.11",
          "product_id": "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64 as a component of Migration Toolkit for Virtualization 2.11",
          "product_id": "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64 as a component of Migration Toolkit for Virtualization 2.11",
          "product_id": "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64 as a component of Migration Toolkit for Virtualization 2.11",
          "product_id": "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64 as a component of Migration Toolkit for Virtualization 2.11",
          "product_id": "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64 as a component of Migration Toolkit for Virtualization 2.11",
          "product_id": "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64 as a component of Migration Toolkit for Virtualization 2.11",
          "product_id": "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64 as a component of Migration Toolkit for Virtualization 2.11",
          "product_id": "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64 as a component of Migration Toolkit for Virtualization 2.11",
          "product_id": "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64 as a component of Migration Toolkit for Virtualization 2.11",
          "product_id": "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64 as a component of Migration Toolkit for Virtualization 2.11",
          "product_id": "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64 as a component of Migration Toolkit for Virtualization 2.11",
          "product_id": "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64 as a component of Migration Toolkit for Virtualization 2.11",
          "product_id": "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64 as a component of Migration Toolkit for Virtualization 2.11",
          "product_id": "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.11"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-50162",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-07-01T21:35:45+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2499694"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in oras-go. The file content store, intended to confine writes to a specified working directory, does not properly account for symbolic link (symlink) traversal. A remote attacker, by providing a specially crafted blob title, could exploit this vulnerability to create files outside the intended working directory. This filesystem boundary bypass allows for arbitrary file creation, potentially leading to unauthorized data modification or system compromise depending on the runtime environment.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "oras-go: oras-go: File store write outside working directory via symlink traversal",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64"
        ],
        "known_not_affected": [
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-50162"
        },
        {
          "category": "external",
          "summary": "RHBZ#2499694",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499694"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-50162",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-50162"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50162",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50162"
        },
        {
          "category": "external",
          "summary": "https://github.com/oras-project/oras-go/security/advisories/GHSA-8xwf-rjm4-xvhv",
          "url": "https://github.com/oras-project/oras-go/security/advisories/GHSA-8xwf-rjm4-xvhv"
        }
      ],
      "release_date": "2026-07-01T21:35:45+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T21:17:32+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\n        https://docs.redhat.com/en/documentation/migration_toolkit_for_virtualization/2.11/html-single/migrating_your_virtual_machines_to_red_hat_openshift_virtualization/index#assembly_upgrading-uninstalling-mtv_mtv",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83662"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "oras-go: oras-go: File store write outside working directory via symlink traversal"
    },
    {
      "cve": "CVE-2026-56852",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-07-21T20:01:56.266823+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504233"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw in the `golang.org/x/text` library can lead to a denial of service. An attacker could provide specially crafted invalid UTF-8 input to an application using the affected `norm.Iter` functionality, causing it to enter an infinite loop and become unresponsive.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64"
        ],
        "known_not_affected": [
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504233",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504233"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56852",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/794100",
          "url": "https://go.dev/cl/794100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80142",
          "url": "https://go.dev/issue/80142"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5970",
          "url": "https://pkg.go.dev/vuln/GO-2026-5970"
        }
      ],
      "release_date": "2026-07-21T19:18:59.951000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T21:17:32+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\n        https://docs.redhat.com/en/documentation/migration_toolkit_for_virtualization/2.11/html-single/migrating_your_virtual_machines_to_red_hat_openshift_virtualization/index#assembly_upgrading-uninstalling-mtv_mtv",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83662"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input"
    },
    {
      "cve": "CVE-2026-59887",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-07-08T17:01:32.856832+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498146"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in linkify-it, a library for recognizing links. A remote attacker could exploit this vulnerability by providing specially crafted user text. The mailto: schema validator, when processing this input, can be repeatedly invoked, leading to excessive CPU consumption. This can result in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "linkify-it: linkify-it: Denial of Service via crafted mailto: links",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `linkify-it` library. Systems processing untrusted user-supplied text containing specially crafted `mailto:` links may experience excessive CPU consumption due to a quadratic complexity issue in the `mailto:` schema validator, leading to temporary service disruption.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64"
        ],
        "known_not_affected": [
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59887"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498146",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498146"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59887",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59887"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59887",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59887"
        },
        {
          "category": "external",
          "summary": "https://github.com/markdown-it/linkify-it/commit/105e5d77f7d119871d2b2d86ed208568eb3e7ffe",
          "url": "https://github.com/markdown-it/linkify-it/commit/105e5d77f7d119871d2b2d86ed208568eb3e7ffe"
        },
        {
          "category": "external",
          "summary": "https://github.com/markdown-it/linkify-it/releases/tag/5.0.2",
          "url": "https://github.com/markdown-it/linkify-it/releases/tag/5.0.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/markdown-it/linkify-it/security/advisories/GHSA-v245-v573-v5vm",
          "url": "https://github.com/markdown-it/linkify-it/security/advisories/GHSA-v245-v573-v5vm"
        }
      ],
      "release_date": "2026-07-08T15:58:12.114000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T21:17:32+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\n        https://docs.redhat.com/en/documentation/migration_toolkit_for_virtualization/2.11/html-single/migrating_your_virtual_machines_to_red_hat_openshift_virtualization/index#assembly_upgrading-uninstalling-mtv_mtv",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83662"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "linkify-it: linkify-it: Denial of Service via crafted mailto: links"
    },
    {
      "cve": "CVE-2026-84445",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-14T16:22:17.356407+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2533175"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64"
        ],
        "known_not_affected": [
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "RHBZ#2533175",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533175"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84445",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7",
          "url": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4",
          "url": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f",
          "url": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/issues/9354",
          "url": "https://github.com/grpc/grpc-go/issues/9354"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9365",
          "url": "https://github.com/grpc/grpc-go/pull/9365"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9366",
          "url": "https://github.com/grpc/grpc-go/pull/9366"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9367",
          "url": "https://github.com/grpc/grpc-go/pull/9367"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2",
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2",
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj",
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"
        }
      ],
      "release_date": "2026-09-14T16:11:41.401000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T21:17:32+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\n        https://docs.redhat.com/en/documentation/migration_toolkit_for_virtualization/2.11/html-single/migrating_your_virtual_machines_to_red_hat_openshift_virtualization/index#assembly_upgrading-uninstalling-mtv_mtv",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83662"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests"
    },
    {
      "cve": "CVE-2026-88031",
      "cwe": {
        "id": "CWE-1287",
        "name": "Improper Validation of Specified Type of Input"
      },
      "discovery_date": "2026-09-10T18:11:27.321656+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2531587"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in go.mongodb.org/mongo-driver for version \u003c 1.17.10 and \u003c 2.9.1. \nImproper handling of data query elements in the GridFS component can lead to a file identifier being misinterpreted as a query. An authenticated user can exploit this to delete all GridFS file chunks, making stored file content unreadable, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "go.mongodb.org/mongo-driver: go.mongodb.org/mongo-driver/v2: MongoDB Go Driver: Data deletion via query-operator injection in GridFS file IDs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the MongoDB Go Driver. The GridFS component does not properly sanitize caller-supplied file identifiers before using them in database queries. A structured document passed as a file ID (for example, a BSON document containing query operators) is interpreted as a query condition rather than a literal match value. An authenticated attacker who can influence the file identifier passed to GridFS operations such as Delete, DownloadToStream, or OpenDownloadStream in an affected application can exploit this to delete all chunks in a GridFS bucket, resulting in permanent data loss and denial of service.\nThe practical impact depends on whether the product\u0027s code passes externally-controlled values as GridFS file identifiers.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64"
        ],
        "known_not_affected": [
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64",
          "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-88031"
        },
        {
          "category": "external",
          "summary": "RHBZ#2531587",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531587"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-88031",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-88031"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-88031",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88031"
        },
        {
          "category": "external",
          "summary": "https://jira.mongodb.org/browse/GODRIVER-4081",
          "url": "https://jira.mongodb.org/browse/GODRIVER-4081"
        },
        {
          "category": "external",
          "summary": "https://www.mongodb.com/community/forums/t/mongodb-go-driver-1-17-10-released/343342",
          "url": "https://www.mongodb.com/community/forums/t/mongodb-go-driver-1-17-10-released/343342"
        }
      ],
      "release_date": "2026-09-10T17:59:35.845000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T21:17:32+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\n        https://docs.redhat.com/en/documentation/migration_toolkit_for_virtualization/2.11/html-single/migrating_your_virtual_machines_to_red_hat_openshift_virtualization/index#assembly_upgrading-uninstalling-mtv_mtv",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83662"
        },
        {
          "category": "workaround",
          "details": "If upgrading go.mongodb.org/mongo-driver to version 1.17.10 (v1) or 2.9.1 (v2) is not immediately possible, the following steps can reduce exposure:\n- Validate file identifiers before passing them to GridFS operations. Ensure that file IDs supplied by users or external systems are scalar values (e.g., primitive.ObjectID or string) and reject any structured BSON documents or maps. This prevents query operator injection.\n- Restrict who can supply GridFS file identifiers. Do not allow unauthenticated or low-privilege users to directly control the file ID parameter in GridFS API calls (Delete, OpenDownloadStream, DownloadToStream, etc.).",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:1a64d633b57fe3f287f850a32b8944acebeb53b9f2635360c1828f052fe14dfe_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:ebd66ac890df1a38947838966310f23d4abf4ec1769c3c207d1c31fd949b1e93_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:9627d5a496737716241bdbdb0312fca9370f2673b0ae22bdbdd455767a3afe45_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:acbadc3f7ef0699e858d497acf7c8ae6d9073906f222d793a2907011066c7a16_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:f6a243876322be64af0ebe46c15e9954b38e1197e185a3a75844cfb4d84bd582_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:d4990c1d9ef8253ba76f9160f4e9d1a5b505b94fbe9bbb7ac2827c2b93937c39_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:e63d82f2af0a9211b6a7bf6ec08940557dd3091ad4c9a4f7e663c25660821900_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:06f651c0182b497208c809cf6f1279171e3aca0aadd62075a0aa71ad76badaae_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:25b3df137db02c1a5962d4b4facda8047d172fae24e21dc3ef970a8dfb152605_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:1dd8b8ea9dde297dbf9dea4ffb6e630cf8547b34c4de565d1fb657ad344db33d_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:4f062b8d9c4151cd772b33761f351886115198ae16d06a1be18e8aa99dff9b84_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:be057c014f23d0ebaa3d21c3d99e1558cdd6efccb9063f6c7c4dd98897fcac81_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:688d769214d9de0458152de609d1d57e89eedb1c56d75bbc8c02b1652e04767a_amd64",
            "Migration Toolkit for Virtualization 2.11:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:8c33e0b35bfae6892f89a9195481cb1b2d926b9120cf9a2147e232b30dad8bd1_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "go.mongodb.org/mongo-driver: go.mongodb.org/mongo-driver/v2: MongoDB Go Driver: Data deletion via query-operator injection in GridFS file IDs"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.