Red Hat Migration Toolkit 1.8 vulnerabilities | LiveThreat CVE Feed

Product

Red Hat Migration Toolkit 1.8

by Red Hat · last CVE Jun 29, 2026

CVEs

On KEV

10.0

Max CVSS

New 30D

Severity mix

Critical 7High 28Medium 6Low 0

Severity

Exploitation

Watch

Add Red Hat Migration Toolkit 1.8 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-42041	6.5	1%	Apr 24	Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy Affected: All versions, or not specified
CVE-2026-42338	6.1	0%	May 12	ip-address: XSS in Address6 HTML-emitting methods Affected: All versions, or not specified
CVE-2026-23745	6.1	0%	Jan 16	node-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization Affected: All versions, or not specified
CVE-2026-22029	6.1	1%	Jan 10	React Router vulnerable to XSS via Open Redirects Affected: All versions, or not specified
CVE-2025-13465	5.3	2%	Jan 21	Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions Affected: All versions, or not specified
CVE-2026-40175	4.8	2%	Apr 10	Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain Affected: All versions, or not specified