github.com/kubev2v/migration-planner vulnerabilities
CVEs whose affected-version data names the github.com/kubev2v/migration-planner package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-53474Critical· 9.6Openshift Migration Advisor: Improper input sanitization allows specially crafted RVTools .xlsx files to include malicious SQL commands
Openshift Migration Advisor: Improper input sanitization allows specially crafted RVTools .xlsx files to include malicious SQL commands
▾ Midnightkubev2v · github.com/kubev2v/migration-plannerEPSS 0.30%via OSV
CVE-2026-53470Critical· 9.6Openshift Migration Advisor: Broken access control in migration-planner image-url endpoint exposes other users' OVA images and agent JWTs
Openshift Migration Advisor: Broken access control in migration-planner image-url endpoint exposes other users' OVA images and agent JWTs
▾ Midnightkubev2v · github.com/kubev2v/migration-plannerEPSS 0.28%via OSV
CVE-2026-53469Critical· 9.1Openshift Migration Advisor lacks proper authorization and filtering for its DELETE /api/v1/sources API
Openshift Migration Advisor lacks proper authorization and filtering for its DELETE /api/v1/sources API
▾ Midnightkubev2v · github.com/kubev2v/migration-plannerEPSS 0.29%via OSV
CVE-2026-53471Critical· 9.6Openshift Migration Advisor agent-API fails to validate JWT source_id claim, allowing cross-tenant data manipulation
Openshift Migration Advisor agent-API fails to validate JWT source_id claim, allowing cross-tenant data manipulation
▾ Midnightkubev2v · github.com/kubev2v/migration-plannerEPSS 0.29%via OSV