Redhat Migration Toolkit vulnerabilities
3 vulnerabilities
Known vulnerabilities in Redhat Migration Toolkit, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2026-29063immutable-js +89 moreImmutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutableImmutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5.CVSS9.8CriticalEPSS0.99%RoutineCVE-2021-3948konveyor · mig-controller +2 morekonveyor mig-controllerAn incorrect default permissions vulnerability was found in the mig-controller. Due to an incorrect cluster namespaces handling an attacker may be able to migrate a malicious workload to the target cluster, impacting confidentiality, integrity, and availability of the services located on that cluster.CVSS6.5MediumEPSS0.56%RoutineCVE-2020-1712[unknown] · systemd +49 more[unknown] systemdA heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.CVSS7.8HighEPSS0.46%