Migration Toolkit for Virtualization vulnerabilities

Product

Migration Toolkit for Virtualization

by Red Hat · last CVE Oct 15, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 3High 6Medium 3Low 0

Severity

Exploitation

Watch

Add Migration Toolkit for Virtualization to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-1615	9.8	1%	Feb 9	Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-supplied JSON Path expressions Affected: All versions, or not specified
CVE-2025-61140	9.8	1%	Jan 28	The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution Affected: All versions, or not specified
CVE-2025-56005	9.8	19%	Jan 20	An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function Affected: All versions, or not specified