Vulnerability GO-2026-5450
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
4 months ago
June 25, 2026 at 10:34 PM UTC
KubeVirt's authorization mechanism improperly truncates subresource names in kubevirt.io/kubevirt
v0.0.1-alpha.0 - v1.10.0-rc.0
v0.0.1-alpha.0 - v1.10.0-rc.0
Summary
KubeVirt's authorization mechanism improperly truncates subresource names in kubevirt.io/kubevirt
Details
KubeVirt's authorization mechanism improperly truncates subresource names in kubevirt.io/kubevirt
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
4 months ago
KubeVirt has a Link Following issue in kubevirt.io/kubevirt
v0.0.1-alpha.0 - v1.10.0-rc.0 GO-2026-5883
v0.0.1-alpha.0 - v1.10.0-rc.0 GO-2026-5883
Unknown
4 months ago
KubeVirt has a Link Following vulnerability in kubevirt.io/kubevirt
v0.0.1-alpha.0 - v1.6.5 and v1.7.0-alpha.0 - v1.7.3 and v1.8.0-alpha.0 - v1.8.2 GO-2026-5848
v0.0.1-alpha.0 - v1.6.5 and v1.7.0-alpha.0 - v1.7.3 and v1.8.0-alpha.0 - v1.8.2 GO-2026-5848
Medium Risk
4 months ago
KubeVirt virt-api port-forward handler vulnerable to SSRF via guest-controlled VMI IP address
v0.0.1-alpha.0 - v1.10.0-beta.0 GHSA-cgm6-wvp9-4g5h
v0.0.1-alpha.0 - v1.10.0-beta.0 GHSA-cgm6-wvp9-4g5h
Medium Risk
4 months ago
KubeVirt virt-handler network cache symlink vulnerability allows arbitrary host file overwrite
v0.0.1-alpha.0 - v1.10.0-rc.0 GHSA-q3jc-42cq-33fj
v0.0.1-alpha.0 - v1.10.0-rc.0 GHSA-q3jc-42cq-33fj
High Risk
5 months ago
KubeVirt has a Link Following issue
v0.0.1-alpha.0 - v1.9.0-beta.0 GHSA-mpmf-3w4r-qfpf
v0.0.1-alpha.0 - v1.9.0-beta.0 GHSA-mpmf-3w4r-qfpf
Impacted packages
Timeline
Published
4 months ago
June 25, 2026 at 10:34 PM UTC
Last Modified
4 months ago
June 26, 2026 at 03:44 PM UTC