In virsh, the hostname could crafted maliciously with ssh arguments, which would be passed to ssh (bsc#1053600).
{ "section": "core" }
"https://advisories.mageia.org/MGASA-2018-0017.json"