{"id":"GO-2026-5450","revision":"1c25e840c5cd4503bd7c047b74210301","records":[{"revision":"1c25e840c5cd4503bd7c047b74210301","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5450","aliases":["CVE-2026-6383","GHSA-j6cv-3w8p-vrg8"],"title":"KubeVirt's authorization mechanism improperly truncates subresource names in kubevirt.io/kubevirt","description":"KubeVirt's authorization mechanism improperly truncates subresource names in kubevirt.io/kubevirt","state":0,"publishedAt":"2026-06-25T22:34:31+00:00","modifiedAt":"2026-06-26T15:44:23.9679431+00:00","affected":[{"ecosystem":"Go","name":"kubevirt.io/kubevirt","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/advisories/GHSA-j6cv-3w8p-vrg8","https://nvd.nist.gov/vuln/detail/CVE-2026-6383","https://access.redhat.com/security/cve/CVE-2026-6383","https://bugzilla.redhat.com/show_bug.cgi?id=2458741","https://github.com/kubevirt/kubevirt/issues/17337"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5450","license":"OSV · upstream source license applies","key":"osv:GO-2026-5450","identifiers":["GO-2026-5450","CVE-2026-6383","GHSA-j6cv-3w8p-vrg8"]},"retained":false,"historicalAffected":[]}],"coverage":[]}