AZL-93147 CVE-2026-56852 affecting package cloud-provider-kubevirt for versions less than 0.5.1-6

🗓️ 21 Jul 2026 20:17:02Reported by GoogleType

osv_azl🔗 osv.dev👁 14 Views

norm.Iter infinite loop in cloud-provider-kubevirt below 0.5.1-6 on invalid UTF-8 input.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM Verify Antenna is affected by multiple vulnerabilities	6 Oct 202614:22	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in golang.org/x/text bundled with IBM Fusion and IBM Fusion HCI.	2 Oct 202616:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	14 Sep 202615:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Genius Hub	27 Aug 202619:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Log Management AQL Plugin is vulnerable to using components with known vulnerabilities	10 Aug 202614:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for August 2026	23 Sep 202614:17	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in golang.org/x/text.	24 Aug 202611:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for August 2026	8 Sep 202618:26	–	ibm
attackerkb	CVE-2026-56852	21 Jul 202619:18	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : docker (ALAS2023-2026-2062)	18 Aug 202600:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-56852

15 Oct 2026 05:37Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.17.5

EPSS0.00475

SSVC

cloud-provider-kubevirt norm.Iter infinite loop invalid UTF-8 library