MT
Product
Migration Toolkit for Applications 8
15
CVEs
0
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 4High 8Medium 3Low 0
Watch
Add Migration Toolkit for Applications 8 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-92982 | 8.5 | Oct 15 | Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection Affected: All versions, or not specified |
| CVE-2026-11332 | 7.8 | Jun 5 | Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution Affected: All versions, or not specified |
| CVE-2026-33814 | 7.5 | May 7 | Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net Affected: All versions, or not specified |
| CVE-2026-42039 | 7.5 | Apr 24 | Axios: unbounded recursion in toFormData causes DoS via deeply nested request data Affected: All versions, or not specified |
| CVE-2026-40895 | 7.5 | Apr 21 | follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets Affected: All versions, or not specified |
| CVE-2026-26278 | 7.5 | Feb 19 | fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit) Affected: All versions, or not specified |
| CVE-2026-25639 | 7.5 | Feb 9 | Axios affected by Denial of Service via __proto__ Key in mergeConfig Affected: All versions, or not specified |
| CVE-2026-42033 | 7.4 | Apr 24 | Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking Affected: All versions, or not specified |
Showing 8