{"schema_version":"1.7.5","id":"GO-2026-5848","published":"2026-07-07T15:26:32Z","modified":"2026-07-07T16:01:34.756255829Z","aliases":["CVE-2026-7374","GHSA-7jcp-v9w4-wjmg"],"summary":"KubeVirt has a Link Following vulnerability in kubevirt.io/kubevirt","details":"KubeVirt has a Link Following vulnerability in kubevirt.io/kubevirt","affected":[{"package":{"name":"kubevirt.io/kubevirt","ecosystem":"Go","purl":"pkg:golang/kubevirt.io/kubevirt"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.6.6"},{"introduced":"1.7.0-alpha.0"},{"fixed":"1.7.4"},{"introduced":"1.8.0-alpha.0"},{"fixed":"1.8.3"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2026-5848.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-7jcp-v9w4-wjmg"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7374"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:20720"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:20736"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:20763"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:20767"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:20782"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:20825"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:20866"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:20886"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:20890"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:20975"},{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2026-7374"},{"type":"WEB","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2463728"},{"type":"WEB","url":"https://github.com/kubevirt/kubevirt/commit/011eef8129e2c21e0ea496f283ee1676009bc757"},{"type":"WEB","url":"https://github.com/kubevirt/kubevirt/pull/17916"},{"type":"WEB","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7374.json"}],"database_specific":{"review_status":"UNREVIEWED","url":"https://pkg.go.dev/vuln/GO-2026-5848"}}