MT
Product
Migration Toolkit for Virtualization 2.9
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 3Medium 0Low 0
Watch
Add Migration Toolkit for Virtualization 2.9 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-4800 | 9.8 | Mar 31 | lodash vulnerable to Code Injection via `_.template` imports key names Affected: All versions, or not specified |
| CVE-2026-4601 | 9.1 | Mar 23 | Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the KJUR.crypto.DSA.signWithMessageHash process in the DSA signing implementation Affected: All versions, or not specified |
| CVE-2026-4599 | 9.1 | Mar 23 | Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandomBigIntegerZeroToMax and… Affected: All versions, or not specified |
| CVE-2026-4600 | 9.1 | Mar 23 | Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameter validation in… Affected: All versions, or not specified |
| CVE-2026-4926 | 7.5 | Mar 26 | path-to-regexp vulnerable to Denial of Service via sequential optional groups Affected: All versions, or not specified |
| CVE-2026-4598 | 7.5 | Mar 23 | Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation… Affected: All versions, or not specified |
| CVE-2026-4602 | 7.5 | Mar 23 | Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative exponents in ext/jsbn2.js Affected: All versions, or not specified |
Showing 7