{"schema_version":"1.3.1","id":"GO-2022-1000","modified":"2024-08-21T16:03:24Z","published":"2024-08-21T16:03:24Z","aliases":["GHSA-qv98-3369-g364"],"summary":"KubeVirt vulnerable to arbitrary file read on host in kubevirt.io/kubevirt","details":"KubeVirt vulnerable to arbitrary file read on host in kubevirt.io/kubevirt","affected":[{"package":{"name":"kubevirt.io/kubevirt","ecosystem":"Go"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.20.0"},{"fixed":"0.55.1"}]}],"ecosystem_specific":{}}],"references":[{"type":"ADVISORY","url":"https://github.com/kubevirt/kubevirt/security/advisories/GHSA-qv98-3369-g364"},{"type":"WEB","url":"https://github.com/google/security-research/security/advisories/GHSA-cvx8-ppmc-78hm"},{"type":"WEB","url":"https://github.com/kubevirt/kubevirt/pull/8198"},{"type":"WEB","url":"https://github.com/kubevirt/kubevirt/pull/8268"}],"database_specific":{"url":"https://pkg.go.dev/vuln/GO-2022-1000","review_status":"UNREVIEWED"}}