{"action":"Upgrade kubevirt.io/kubevirt to 0.55.1 or later.","affected":[{"fixed":"0.55.1","introduced":"0.20.0"}],"component":"kubevirt.io/kubevirt","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.55.1"],"ghsa_id":"GHSA-qv98-3369-g364","id":"tcs_01M5KFXJ662CXC1T51GZ1TWT5W","modified_at":"2026-03-13T21:57:16.907888Z","published_at":"2024-08-21T16:03:24Z","references":["https://osv.dev/vulnerability/GO-2022-1000","https://github.com/kubevirt/kubevirt/security/advisories/GHSA-qv98-3369-g364","https://github.com/google/security-research/security/advisories/GHSA-cvx8-ppmc-78hm","https://github.com/kubevirt/kubevirt/pull/8198","https://github.com/kubevirt/kubevirt/pull/8268"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-1000","url":"https://osv.dev/vulnerability/GO-2022-1000"}],"summary":"KubeVirt vulnerable to arbitrary file read on host in kubevirt.io/kubevirt"}