Affected by GO-2026-6224
and 3 other vulnerabilities
GO-2026-6224: Openshift Migration Advisor lacks proper authorization and filtering for its DELETE /api/v1/sources API in github.com/kubev2v/migration-planner
GO-2026-6228: Openshift Migration Advisor agent-API fails to validate JWT source_id claim, allowing cross-tenant data manipulation in github.com/kubev2v/migration-planner
GO-2026-6229: Openshift Migration Advisor: Broken access control in migration-planner image-url endpoint exposes other users' OVA images and agent JWTs in github.com/kubev2v/migration-planner
GO-2026-6233: Openshift Migration Advisor: Improper input sanitization allows specially crafted RVTools .xlsx files to include malicious SQL commands in github.com/kubev2v/migration-planner
GetSwagger returns the Swagger specification corresponding to the generated code
in this file. The external references of Swagger specification are resolved.
The logic of resolving external references is tightly connected to "import-mapping" feature.
Externally referenced files must be embedded in the corresponding golang packages.
Urls can be supported but this task was out of the scope.