github.com/fluxcd/kustomize-controller
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Improper path handling in Kustomization files allows for denial of service | github.com/fluxcd/flux2github.com/fluxcd/kustomize-controller | Go | High | Fix reported | |
| Improper use of metav1.Duration allows for Denial of Service | github.com/fluxcd/flux2github.com/fluxcd/helm-controller/api | Go | Medium | Fix reported | |
| Improper path handling in kustomization files allows path traversal | github.com/fluxcd/flux2github.com/fluxcd/kustomize-controller | Go | Critical | Fix reported | |
| Privilege escalation to cluster admin on multi-tenant environments | github.com/fluxcd/kustomize-controller | Go | High | Fix reported | |
| Improper kubeconfig validation allows arbitrary code execution | github.com/fluxcd/flux2github.com/fluxcd/helm-controller | Go | Critical | Fix reported |