kubev2v/migration-planner Security Advisories | GitStock

critical2026-06-10

Openshift Migration Advisor: Improper input sanitization allows specially crafted RVTools .xlsx files to include malicious SQL commands

GHSA-vf2h-7x3w-97fr · CVE-2026-53474

critical2026-06-10

Openshift Migration Advisor: Broken access control in migration-planner image-url endpoint exposes other users' OVA images and agent JWTs

GHSA-v5m8-5455-qw2x · CVE-2026-53470

critical2026-06-10

Openshift Migration Advisor lacks proper authorization and filtering for its DELETE /api/v1/sources API

GHSA-6xvf-9742-48w2 · CVE-2026-53469

critical2026-06-10

Openshift Migration Advisor agent-API fails to validate JWT source_id claim, allowing cross-tenant data manipulation

GHSA-2fqw-7c6r-2cq6 · CVE-2026-53471