container-native-virtualization/virt-cdi-operator vulnerabilities

CVEs whose affected-version data names the container-native-virtualization/virt-cdi-operator package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-17527High· 7.7

1mo ago

In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI resources, includes a rule granting create on the datavolumes/source subresource

In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI resources, includes a rule granting create on the datavolumes/source subresource. CDI's DataVolume clone a…

▾ TwilightRed Hat · container-native-virtualization/virt-cdi-operator-rhel9EPSS 0.32%via NVD