{"id":"GO-2026-4281","revision":"5a5606db460c4ec68fe0217163d60e5e","records":[{"revision":"5a5606db460c4ec68fe0217163d60e5e","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-4281","aliases":["CVE-2025-62877","GHSA-6g8q-hp2j-gvwv"],"title":"Harvest May Expose OS Default SSH Login Password Via SUSE Virtualization Interactive Installer in github.com/harvester/harvester-installer","description":"Harvest May Expose OS Default SSH Login Password Via SUSE Virtualization Interactive Installer in github.com/harvester/harvester-installer","state":0,"publishedAt":"2026-01-12T17:39:39+00:00","modifiedAt":"2026-03-03T04:57:53.134253+00:00","affected":[{"ecosystem":"Go","name":"github.com/harvester/harvester-installer","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.5.0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/harvester/harvester-installer","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.6.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/harvester/harvester/security/advisories/GHSA-6g8q-hp2j-gvwv","https://nvd.nist.gov/vuln/detail/CVE-2025-62877","https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-62877"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-4281","license":"OSV · upstream source license applies","key":"osv:GO-2026-4281","identifiers":["GO-2026-4281","CVE-2025-62877","GHSA-6g8q-hp2j-gvwv"]},"retained":false,"historicalAffected":[]}],"coverage":[]}