Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/v2v-conversion-host@1.14.2-1?arch=el7ev
purl pkg:rpm/redhat/v2v-conversion-host@1.14.2-1?arch=el7ev
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 10.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-3s9f-prpy-hbcx
Aliases:
CVE-2019-11358
GHSA-6c3j-c64m-qhgq
Cross-site Scripting The jQuery library, which is included in rdoc, mishandles `jQuery.extend(true, {}, ...)` because of Object.prototype pollution. If an unsanitized source object contained an enumerable `__proto__` property, it could extend the native `Object.prototype.` There are no reported fixed by versions.
VCID-qkba-kwnv-9fen
Aliases:
CVE-2018-10854
cloudforms: stored cross-site scripting in Name field There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:20:49.063353+00:00 RedHat Importer Affected by VCID-qkba-kwnv-9fen https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10854.json 38.0.0
2026-04-01T14:20:41.066236+00:00 RedHat Importer Affected by VCID-3s9f-prpy-hbcx https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json 38.0.0