RHSA-2022:6429HighCVSS 9.8

Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.4 security and bug fix update

Published
September 13, 2022
Last Modified
May 23, 2026

🔗 CVE IDs covered (8)

CVE-2022-0686 →CVE-2022-0691 →CVE-2022-1650 →CVE-2022-30631 →CVE-2020-28500 →CVE-2021-23337 →CVE-2022-0512 →CVE-2022-0639 →

📋 Description

CVE-2020-28500 — nodejs-lodash: ReDoS via the toNumber, trim and trimEnd functions CVE-2021-23337 — nodejs-lodash: command injection via template CVE-2022-0512 — nodejs-url-parse: authorization bypass through user-controlled key CVE-2022-0639 — npm-url-parse: Authorization Bypass Through User-Controlled Key CVE-2022-0686 — npm-url-parse: Authorization bypass through user-controlled key CVE-2022-0691 — npm-url-parse: authorization bypass through user-controlled key CVE-2022-1650 — eventsource: Exposure of Sensitive Information CVE-2022-30631 — golang: compress/gzip: stack exhaustion in Reader.Read

🔗 References (11)