{"action":"Upgrade kubevirt.io/kubevirt to 0.55.1 or later.","affected":[{"fixed":"0.55.1","introduced":"0.20.0"}],"component":"kubevirt.io/kubevirt","cve_ids":["CVE-2022-1798"],"ecosystem":"Go","epss":0.00376,"exploited":false,"fixed_versions":["0.55.1"],"ghsa_id":"GHSA-qv98-3369-g364","id":"tcs_01M5KFKKBD56PQ1H3TH6922A8B","modified_at":"2026-09-10T03:50:07.601425868Z","published_at":"2022-09-15T03:20:35Z","references":["https://osv.dev/vulnerability/GHSA-qv98-3369-g364","https://github.com/google/security-research/security/advisories/GHSA-cvx8-ppmc-78hm","https://github.com/kubevirt/kubevirt/security/advisories/GHSA-qv98-3369-g364","https://github.com/kubevirt/kubevirt/pull/8198","https://github.com/kubevirt/kubevirt/pull/8268","https://github.com/kubevirt/kubevirt"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-qv98-3369-g364","url":"https://osv.dev/vulnerability/GHSA-qv98-3369-g364"}],"summary":"KubeVirt vulnerable to arbitrary file read on host"}