Affected by GO-2022-1000 and 4 other vulnerabilities

GO-2022-1000: KubeVirt vulnerable to arbitrary file read on host in kubevirt.io/kubevirt

GO-2024-2688: KubeVirt NULL pointer dereference flaw in kubevirt.io/kubevirt

GO-2024-2756: Privilege Escalation in kubevirt in kubevirt.io/kubevirt

GO-2024-2765: Permissions bypass in KubeVirt in kubevirt.io/kubevirt

GO-2024-2816: kubevirt allows a local attacker to execute arbitrary code via a crafted command in kubevirt.io/kubevirt

pkg/

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/kubevirt/kubevirt

Links

Open Source Insights

Directories ¶

Path	Synopsis
certificates
triple Package triple generates key-certificate pairs for the triple (CA, Server, Client).	Package triple generates key-certificate pairs for the triple (CA, Server, Client).
cloud-init
config
container-disk
controller * This file is part of the KubeVirt project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License.	* This file is part of the KubeVirt project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License.
emptydisk
ephemeral-disk
ephemeral-disk-utils
handler-launcher-com * This file is part of the KubeVirt project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License.	* This file is part of the KubeVirt project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License.
cmd/info Package info is a generated protocol buffer package.	Package info is a generated protocol buffer package.
cmd/v1 Package v1 is a generated protocol buffer package.	Package v1 is a generated protocol buffer package.
notify/info Package info is a generated protocol buffer package.	Package info is a generated protocol buffer package.
notify/v1 Package v1 is a generated protocol buffer package.	Package v1 is a generated protocol buffer package.
healthz
hooks
info Package kubevirt_hooks_info is a generated protocol buffer package.	Package kubevirt_hooks_info is a generated protocol buffer package.
v1alpha1 Package kubevirt_hooks_v1alpha1 is a generated protocol buffer package.	Package kubevirt_hooks_v1alpha1 is a generated protocol buffer package.
v1alpha2 Package kubevirt_hooks_v1alpha2 is a generated protocol buffer package.	Package kubevirt_hooks_v1alpha2 is a generated protocol buffer package.
host-disk
ignition
inotify-informer
middleware
monitoring
client/prometheus Package prometheus creates and registers prometheus metrics with rest clients.	Package prometheus creates and registers prometheus metrics with rest clients.
reflector/prometheus Package prometheus sets the cache DefaultMetricsFactory to produce prometheus metrics.	Package prometheus sets the cache DefaultMetricsFactory to produce prometheus metrics.
vms/prometheus
workqueue/prometheus
rest
endpoints
filter
service
staging
glog This package reimplements github.com/golang/glog and logs to a structured logger.	This package reimplements github.com/golang/glog and logs to a structured logger.
testutils
util
hardware
lookup
migrations
net/dns
net/grpc * This file is part of the KubeVirt project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License.	* This file is part of the KubeVirt project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License.
openapi
types
virt-api
rest
webhooks * hyperv utilities are in the webhooks package because they are used both * by validation and mutation webhooks.	* hyperv utilities are in the webhooks package because they are used both * by validation and mutation webhooks.
webhooks/mutating-webhook
webhooks/mutating-webhook/mutators
webhooks/validating-webhook
webhooks/validating-webhook/admitters
virt-config
virt-controller
leaderelectionconfig
rest
services
watch
watch/drain/disruptionbudget
watch/drain/evacuation
virt-handler
cache
cmd-client
container-disk
device-manager
device-manager/deviceplugin/v1beta1 Package v1beta1 is a generated protocol buffer package.	Package v1beta1 is a generated protocol buffer package.
isolation
migration-proxy
notify-server * This file is part of the KubeVirt project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License.	* This file is part of the KubeVirt project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License.
rest
selinux
virt-launcher
notify-client
virtwrap
virtwrap/agent-poller * This file is part of the KubeVirt project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License.	* This file is part of the KubeVirt project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License.
virtwrap/api
virtwrap/cli
virtwrap/cmd-server * This file is part of the KubeVirt project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License.	* This file is part of the KubeVirt project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License.
virtwrap/errors
virtwrap/network
virtwrap/network/dhcp
virtwrap/stats
virtwrap/statsconv
virtwrap/util
virt-operator
creation/components * This file is part of the KubeVirt project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License.	* This file is part of the KubeVirt project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License.
creation/csv * This file is part of the KubeVirt project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License.	* This file is part of the KubeVirt project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License.
creation/rbac * This file is part of the KubeVirt project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License.	* This file is part of the KubeVirt project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License.
install-strategy
util * This file is part of the KubeVirt project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License.	* This file is part of the KubeVirt project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License.
virtctl
console
expose
imageupload
templates
version
vm
vnc
watchdog

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL