RHSA-2026:83663

Vulnerability from csaf_redhat - Published: 2026-10-15 21:17 - Updated: 2026-10-16 18:58
Summary
Red Hat Security Advisory: MTV RHEL9 Images
Severity
Important
Notes
Topic: Updated Release packages that fix several bugs and add various enhancements are now available.
Details: Migration Toolkit for Virtualization Images
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-50162

A flaw was found in oras-go. The file content store, intended to confine writes to a specified working directory, does not properly account for symbolic link (symlink) traversal. A remote attacker, by providing a specially crafted blob title, could exploit this vulnerability to create files outside the intended working directory. This filesystem boundary bypass allows for arbitrary file creation, potentially leading to unauthorized data modification or system compromise depending on the runtime environment.

5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products
Product Identifier Version Remediation
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64 —
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64 —
Threats
Impact Moderate
CVE-2026-56852

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Affected products
Product Identifier Version Remediation
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64 —
Workaround
Threats
Impact Important
CVE-2026-59887

A flaw was found in linkify-it, a library for recognizing links. A remote attacker could exploit this vulnerability by providing specially crafted user text. The mailto: schema validator, when processing this input, can be repeatedly invoked, leading to excessive CPU consumption. This can result in a Denial of Service (DoS) for the affected system.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1333 - Inefficient Regular Expression Complexity
Affected products
Product Identifier Version Remediation
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64 —
Workaround
Unresolved product id: Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64 —
Workaround
Threats
Impact Important
CVE-2026-84445

A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-125 - Out-of-bounds Read
Affected products
Fixed 1 product, the same list as for CVE-2026-50162
Known not affected 13 products, the same list as for CVE-2026-50162
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:83663 self
https://access.redhat.com/security/cve/CVE-2026-50162 external
https://access.redhat.com/security/cve/CVE-2026-56852 external
https://access.redhat.com/security/cve/CVE-2026-59887 external
https://access.redhat.com/security/cve/CVE-2026-84445 external
https://access.redhat.com/security/updates/classi… external
https://docs.redhat.com/en/documentation/migratio… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-50162 self
https://bugzilla.redhat.com/show_bug.cgi?id=2499694 external
https://www.cve.org/CVERecord?id=CVE-2026-50162 external
https://nvd.nist.gov/vuln/detail/CVE-2026-50162 external
https://github.com/oras-project/oras-go/security/… external
https://access.redhat.com/security/cve/CVE-2026-56852 self
https://bugzilla.redhat.com/show_bug.cgi?id=2504233 external
https://www.cve.org/CVERecord?id=CVE-2026-56852 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56852 external
https://go.dev/cl/794100 external
https://go.dev/issue/80142 external
https://pkg.go.dev/vuln/GO-2026-5970 external
https://access.redhat.com/security/cve/CVE-2026-59887 self
https://bugzilla.redhat.com/show_bug.cgi?id=2498146 external
https://www.cve.org/CVERecord?id=CVE-2026-59887 external
https://nvd.nist.gov/vuln/detail/CVE-2026-59887 external
https://github.com/markdown-it/linkify-it/commit/… external
https://github.com/markdown-it/linkify-it/release… external
https://github.com/markdown-it/linkify-it/securit… external
https://access.redhat.com/security/cve/CVE-2026-84445 self
https://bugzilla.redhat.com/show_bug.cgi?id=2533175 external
https://www.cve.org/CVERecord?id=CVE-2026-84445 external
https://nvd.nist.gov/vuln/detail/CVE-2026-84445 external
https://github.com/grpc/grpc-go/commit/3822494d8e… external
https://github.com/grpc/grpc-go/commit/8668b69c16… external
https://github.com/grpc/grpc-go/commit/93e31b4854… external
https://github.com/grpc/grpc-go/issues/9354 external
https://github.com/grpc/grpc-go/pull/9365 external
https://github.com/grpc/grpc-go/pull/9366 external
https://github.com/grpc/grpc-go/pull/9367 external
https://github.com/grpc/grpc-go/releases/tag/v1.82.2 external
https://github.com/grpc/grpc-go/releases/tag/v1.83.2 external
https://github.com/grpc/grpc-go/security/advisori… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated Release packages that fix several bugs and add various enhancements are now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Migration Toolkit for Virtualization Images",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:83663",
        "url": "https://access.redhat.com/errata/RHSA-2026:83663"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-50162",
        "url": "https://access.redhat.com/security/cve/CVE-2026-50162"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56852",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56852"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59887",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59887"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84445",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84445"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/migration_toolkit_for_virtualization",
        "url": "https://docs.redhat.com/en/documentation/migration_toolkit_for_virtualization"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83663.json"
      }
    ],
    "title": "Red Hat Security Advisory: MTV RHEL9 Images",
    "tracking": {
      "current_release_date": "2026-10-16T18:58:44+00:00",
      "generator": {
        "date": "2026-10-16T18:58:44+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.2"
        }
      },
      "id": "RHSA-2026:83663",
      "initial_release_date": "2026-10-15T21:17:46+00:00",
      "revision_history": [
        {
          "date": "2026-10-15T21:17:46+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-15T21:17:54+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-16T18:58:44+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Migration Toolkit for Virtualization 2.10",
                "product": {
                  "name": "Migration Toolkit for Virtualization 2.10",
                  "product_id": "Migration Toolkit for Virtualization 2.10",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:migration_toolkit_virtualization:2.10::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Migration Toolkit for Virtualization"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-api-rhel9@sha256%3Aa971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9\u0026tag=1791228191"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-cli-download-rhel9@sha256%3A2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9\u0026tag=1791228158"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-console-plugin-rhel9@sha256%3Aa8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9\u0026tag=1791248996"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-controller-rhel9@sha256%3A87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9\u0026tag=1791228194"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-must-gather-rhel9@sha256%3A057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9\u0026tag=1791228172"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-rhel9-operator@sha256%3Adf61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator\u0026tag=1791228160"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-operator-bundle@sha256%3A3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle\u0026tag=1791281489"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-ova-proxy-rhel9@sha256%3A057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9\u0026tag=1791228163"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-openstack-populator-rhel9@sha256%3A37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9\u0026tag=1791228196"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-ova-provider-server-rhel9@sha256%3Aa5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9\u0026tag=1791228192"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-populator-controller-rhel9@sha256%3A77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9\u0026tag=1791228202"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-validation-rhel9@sha256%3A3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9\u0026tag=1791228247"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-virt-v2v-rhel9@sha256%3Ae3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9\u0026tag=1791228348"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64",
                "product": {
                  "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64",
                  "product_id": "registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mtv-vsphere-xcopy-volume-populator-rhel9@sha256%3A292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6?arch=amd64\u0026repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9\u0026tag=1791228202"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64 as a component of Migration Toolkit for Virtualization 2.10",
          "product_id": "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64 as a component of Migration Toolkit for Virtualization 2.10",
          "product_id": "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64 as a component of Migration Toolkit for Virtualization 2.10",
          "product_id": "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64 as a component of Migration Toolkit for Virtualization 2.10",
          "product_id": "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64 as a component of Migration Toolkit for Virtualization 2.10",
          "product_id": "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64 as a component of Migration Toolkit for Virtualization 2.10",
          "product_id": "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64 as a component of Migration Toolkit for Virtualization 2.10",
          "product_id": "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64 as a component of Migration Toolkit for Virtualization 2.10",
          "product_id": "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64 as a component of Migration Toolkit for Virtualization 2.10",
          "product_id": "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64 as a component of Migration Toolkit for Virtualization 2.10",
          "product_id": "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64 as a component of Migration Toolkit for Virtualization 2.10",
          "product_id": "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64 as a component of Migration Toolkit for Virtualization 2.10",
          "product_id": "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64 as a component of Migration Toolkit for Virtualization 2.10",
          "product_id": "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64 as a component of Migration Toolkit for Virtualization 2.10",
          "product_id": "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64"
        },
        "product_reference": "registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64",
        "relates_to_product_reference": "Migration Toolkit for Virtualization 2.10"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-50162",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-07-01T21:35:45+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2499694"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in oras-go. The file content store, intended to confine writes to a specified working directory, does not properly account for symbolic link (symlink) traversal. A remote attacker, by providing a specially crafted blob title, could exploit this vulnerability to create files outside the intended working directory. This filesystem boundary bypass allows for arbitrary file creation, potentially leading to unauthorized data modification or system compromise depending on the runtime environment.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "oras-go: oras-go: File store write outside working directory via symlink traversal",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64"
        ],
        "known_not_affected": [
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-50162"
        },
        {
          "category": "external",
          "summary": "RHBZ#2499694",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499694"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-50162",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-50162"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50162",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50162"
        },
        {
          "category": "external",
          "summary": "https://github.com/oras-project/oras-go/security/advisories/GHSA-8xwf-rjm4-xvhv",
          "url": "https://github.com/oras-project/oras-go/security/advisories/GHSA-8xwf-rjm4-xvhv"
        }
      ],
      "release_date": "2026-07-01T21:35:45+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T21:17:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\n        https://docs.redhat.com/en/documentation/migration_toolkit_for_virtualization/2.10/html-single/migrating_your_virtual_machines_to_red_hat_openshift_virtualization/index#assembly_upgrading-uninstalling-mtv_mtv",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83663"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "oras-go: oras-go: File store write outside working directory via symlink traversal"
    },
    {
      "cve": "CVE-2026-56852",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-07-21T20:01:56.266823+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504233"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw in the `golang.org/x/text` library can lead to a denial of service. An attacker could provide specially crafted invalid UTF-8 input to an application using the affected `norm.Iter` functionality, causing it to enter an infinite loop and become unresponsive.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64"
        ],
        "known_not_affected": [
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504233",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504233"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56852",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/794100",
          "url": "https://go.dev/cl/794100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80142",
          "url": "https://go.dev/issue/80142"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5970",
          "url": "https://pkg.go.dev/vuln/GO-2026-5970"
        }
      ],
      "release_date": "2026-07-21T19:18:59.951000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T21:17:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\n        https://docs.redhat.com/en/documentation/migration_toolkit_for_virtualization/2.10/html-single/migrating_your_virtual_machines_to_red_hat_openshift_virtualization/index#assembly_upgrading-uninstalling-mtv_mtv",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83663"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input"
    },
    {
      "cve": "CVE-2026-59887",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-07-08T17:01:32.856832+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498146"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in linkify-it, a library for recognizing links. A remote attacker could exploit this vulnerability by providing specially crafted user text. The mailto: schema validator, when processing this input, can be repeatedly invoked, leading to excessive CPU consumption. This can result in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "linkify-it: linkify-it: Denial of Service via crafted mailto: links",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `linkify-it` library. Systems processing untrusted user-supplied text containing specially crafted `mailto:` links may experience excessive CPU consumption due to a quadratic complexity issue in the `mailto:` schema validator, leading to temporary service disruption.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64"
        ],
        "known_not_affected": [
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59887"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498146",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498146"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59887",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59887"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59887",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59887"
        },
        {
          "category": "external",
          "summary": "https://github.com/markdown-it/linkify-it/commit/105e5d77f7d119871d2b2d86ed208568eb3e7ffe",
          "url": "https://github.com/markdown-it/linkify-it/commit/105e5d77f7d119871d2b2d86ed208568eb3e7ffe"
        },
        {
          "category": "external",
          "summary": "https://github.com/markdown-it/linkify-it/releases/tag/5.0.2",
          "url": "https://github.com/markdown-it/linkify-it/releases/tag/5.0.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/markdown-it/linkify-it/security/advisories/GHSA-v245-v573-v5vm",
          "url": "https://github.com/markdown-it/linkify-it/security/advisories/GHSA-v245-v573-v5vm"
        }
      ],
      "release_date": "2026-07-08T15:58:12.114000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T21:17:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\n        https://docs.redhat.com/en/documentation/migration_toolkit_for_virtualization/2.10/html-single/migrating_your_virtual_machines_to_red_hat_openshift_virtualization/index#assembly_upgrading-uninstalling-mtv_mtv",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83663"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "linkify-it: linkify-it: Denial of Service via crafted mailto: links"
    },
    {
      "cve": "CVE-2026-84445",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-14T16:22:17.356407+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2533175"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64"
        ],
        "known_not_affected": [
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64",
          "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "RHBZ#2533175",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533175"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84445",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7",
          "url": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4",
          "url": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f",
          "url": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/issues/9354",
          "url": "https://github.com/grpc/grpc-go/issues/9354"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9365",
          "url": "https://github.com/grpc/grpc-go/pull/9365"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9366",
          "url": "https://github.com/grpc/grpc-go/pull/9366"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9367",
          "url": "https://github.com/grpc/grpc-go/pull/9367"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2",
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2",
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj",
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"
        }
      ],
      "release_date": "2026-09-14T16:11:41.401000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T21:17:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\n        https://docs.redhat.com/en/documentation/migration_toolkit_for_virtualization/2.10/html-single/migrating_your_virtual_machines_to_red_hat_openshift_virtualization/index#assembly_upgrading-uninstalling-mtv_mtv",
          "product_ids": [
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83663"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9@sha256:a971c06918017c4b36f6f1f3dbff8a61d336b68b9dac22a124a757ae45f809fc_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-cli-download-rhel9@sha256:2ec931bab5cce67a24f7f55536b090e91ce8f13bda3fe7324b133cc35f682fa9_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:a8cea4674182c181ac918ebb74ada1a3029c8c75d844e1a022ca583ca5ca9e44_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel9@sha256:87fb394733eabb821d8be779316e5225d45cf9ce4f09225a7c203f2a14d6385c_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-must-gather-rhel9@sha256:057bf56acae27a2a7c4fbb9ebd2857b932d9324b2002cab41f21f2931431a098_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:37fe0eff444c0b4ef70c9aefb836d9d412b68aecc3050574768b2f376c971be8_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-operator-bundle@sha256:3f7320158484a43b3576a675be4decb5d16e2a43287fa97bcf4717cedc32d2ed_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:a5fabf9832c0dda8be34e43f49284f5b6c1c7bbb5ad75d89b7331c3a8d598a95_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-ova-proxy-rhel9@sha256:057f4104612a3923c224c14e0b4d4a65130d71098fdfcb1f0144ccb9670f75c5_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:77c123b144057c5a08d4d11eda84478706bd11ef4a8a1115e7d617a14827be67_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-rhel9-operator@sha256:df61f9084cb325db0dc5b38628fa0f06a958d4951714775e2cecfa041d1bb225_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9@sha256:3535fe7d87872ca3ec41a0eccb05f66b84f05e33044ab182398997465e95007b_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:e3d35ef0434fa976a2f6a8c910391d669fa145ad67e2ca36d281497d088a8d8f_amd64",
            "Migration Toolkit for Virtualization 2.10:registry.redhat.io/migration-toolkit-virtualization/mtv-vsphere-xcopy-volume-populator-rhel9@sha256:292fc6d7fbb4d2d77dac30784303a4d2f782795416b68259cfd772d9e3d518f6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.