PkgSeer

Vulnerability GO-2026-5848

Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
4 months ago
July 07, 2026 at 03:26 PM UTC
KubeVirt has a Link Following vulnerability in kubevirt.io/kubevirt
v0.0.1-alpha.0 - v1.6.5 and v1.7.0-alpha.0 - v1.7.3 and v1.8.0-alpha.0 - v1.8.2
v0.0.1-alpha.0 - v1.6.5 and v1.7.0-alpha.0 - v1.7.3 and v1.8.0-alpha.0 - v1.8.2

Summary

KubeVirt has a Link Following vulnerability in kubevirt.io/kubevirt

Details

KubeVirt has a Link Following vulnerability in kubevirt.io/kubevirt

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Unknown
4 months ago
KubeVirt has a Link Following issue in kubevirt.io/kubevirt
v0.0.1-alpha.0 - v1.10.0-rc.0 GO-2026-5883
v0.0.1-alpha.0 - v1.10.0-rc.0 GO-2026-5883
Medium Risk
4 months ago
KubeVirt virt-api port-forward handler vulnerable to SSRF via guest-controlled VMI IP address
v0.0.1-alpha.0 - v1.10.0-beta.0 GHSA-cgm6-wvp9-4g5h
v0.0.1-alpha.0 - v1.10.0-beta.0 GHSA-cgm6-wvp9-4g5h
Medium Risk
4 months ago
KubeVirt virt-handler network cache symlink vulnerability allows arbitrary host file overwrite
v0.0.1-alpha.0 - v1.10.0-rc.0 GHSA-q3jc-42cq-33fj
v0.0.1-alpha.0 - v1.10.0-rc.0 GHSA-q3jc-42cq-33fj
Unknown
4 months ago
KubeVirt's authorization mechanism improperly truncates subresource names in kubevirt.io/kubevirt
v0.0.1-alpha.0 - v1.10.0-rc.0 GO-2026-5450
v0.0.1-alpha.0 - v1.10.0-rc.0 GO-2026-5450
High Risk
5 months ago
KubeVirt has a Link Following issue
v0.0.1-alpha.0 - v1.9.0-beta.0 GHSA-mpmf-3w4r-qfpf
v0.0.1-alpha.0 - v1.9.0-beta.0 GHSA-mpmf-3w4r-qfpf
View all vulnerabilities for these packages

Impacted packages

Timeline

Published
4 months ago
July 07, 2026 at 03:26 PM UTC
Fixed (v1.7.4)
5 months ago
June 01, 2026 at 02:48 PM UTC
Fixed (v1.8.3)
5 months ago
June 02, 2026 at 05:00 AM UTC
Fixed (v1.6.6)
5 months ago
June 02, 2026 at 10:26 PM UTC
Last Modified
4 months ago
July 07, 2026 at 04:01 PM UTC