GHSA-m3hq-3qj8-c5fm (CVE-2026-1530)

Details

A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift, resulting in information disclosure and data integrity compromise.

Affected Packages

fog-kubevirt

RubyGems

Fixed in:

1.5.1

References

WEBhttps://access.redhat.com/security/cve/CVE-2026-1530 WEBhttps://bugzilla.redhat.com/show_bug.cgi?id=2433784 ADVISORYhttps://github.com/advisories/GHSA-m3hq-3qj8-c5fm PACKAGEhttps://github.com/fog/fog-kubevirt WEBhttps://github.com/fog/fog-kubevirt/blob/8adb03e07972d6e19a7713ecf2a827aa2cfe4b9e/CHANGELOG.md?plain=1#L11 WEBhttps://github.com/fog/fog-kubevirt/commit/8371e9ded99f9ec3e74caf2f283836109763e450 WEBhttps://github.com/fog/fog-kubevirt/commit/9603d79a239a0f68bedfc679cd1b65fbf6ec4753 WEBhttps://github.com/fog/fog-kubevirt/pull/168 WEBhttps://github.com/fog/fog-kubevirt/releases/tag/v1.5.1 WEBhttps://github.com/rubysec/ruby-advisory-db/blob/master/gems/fog-kubevirt/CVE-2026-1530.yml ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2026-1530

GHSA-m3hq-3qj8-c5fm

Details

Affected Packages

References

Aliases

CVSS Analysis

Related

Ecosystems

Timeline