Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/harvester/harvester-installer

1 known vulnerability (1 critical), with the versions each affects and the releases that fix them.

Latest release
v1.8.2 (Aug 6, 2026): affected by CVE-2025-62877
Newest unaffected release
v1.4.3 (May 23, 2025)
Advisories
1 · 1 critical
Releases
183 since v0.1.6 (Apr 23, 2021)
Registry
pkg.go.dev
Releases read
Nov 8, 2026

Version timeline

  • CVE-2025-62877
    Affects v1.5.0 to v1.9.0-dev-20260705 (through the newest release)
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

  • CVE-2025-62877Critical 9.8

    Harvest may expose OS default ssh login password via SUSE Virtualization Interactive Installer

    Affected: from 1.5.0; from 1.6.0; from 1.6.0, through 1.6.1; from 1.5.0, through 1.5.2.

    No fix released. The latest release, v1.8.2, is still affected.