CRITICAL9.6Go
GHSA-2fqw-7c6r-2cq6· CVE-2026-53471, GO-2026-6228Openshift Migration Advisor agent-API fails to validate JWT source_id claim, allowing cross-tenant data manipulation
Modified: 8/18/2026
package
Go/github.com/kubev2v/migration-planner
pkg:go/github.com/kubev2v/migration-planner
CRITICAL9.1Go
GHSA-6xvf-9742-48w2· CVE-2026-53469, GO-2026-6224Openshift Migration Advisor lacks proper authorization and filtering for its DELETE /api/v1/sources API
Modified: 8/18/2026
CRITICAL9.6Go
GHSA-v5m8-5455-qw2x· CVE-2026-53470, GO-2026-6229Openshift Migration Advisor: Broken access control in migration-planner image-url endpoint exposes other users' OVA images and agent JWTs
Modified: 8/18/2026
CRITICAL9.6Go
GHSA-vf2h-7x3w-97fr· CVE-2026-53474, GO-2026-6233Openshift Migration Advisor: Improper input sanitization allows specially crafted RVTools .xlsx files to include malicious SQL commands
Modified: 8/18/2026
—Go
GO-2026-6224· CVE-2026-53469, GHSA-6xvf-9742-48w2Openshift Migration Advisor lacks proper authorization and filtering for its DELETE /api/v1/sources API in github.com/kubev2v/migration-planner
Modified: 8/18/2026
—Go
GO-2026-6228· CVE-2026-53471, GHSA-2fqw-7c6r-2cq6Openshift Migration Advisor agent-API fails to validate JWT source_id claim, allowing cross-tenant data manipulation in github.com/kubev2v/migration-planner
Modified: 8/18/2026
—Go
GO-2026-6229· CVE-2026-53470, GHSA-v5m8-5455-qw2xOpenshift Migration Advisor: Broken access control in migration-planner image-url endpoint exposes other users' OVA images and agent JWTs in github.com/kubev2v/migration-planner
Modified: 8/18/2026
—Go
GO-2026-6233· CVE-2026-53474, GHSA-vf2h-7x3w-97frOpenshift Migration Advisor: Improper input sanitization allows specially crafted RVTools .xlsx files to include malicious SQL commands in github.com/kubev2v/migration-planner
Modified: 8/18/2026