All products

github.com/fluxcd/flux2

Go · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Flux CLI Workload InjectionCVE-2022-36035 · GHSA-XWF3-6RGV-939RVersion ranges need review. github.com/fluxcd/flux2 Go High Fix reported
Improper path handling in Kustomization files allows for denial of serviceCVE-2022-24878 · GHSA-7PWF-JG34-HXWPVersion ranges need review. github.com/fluxcd/flux2github.com/fluxcd/kustomize-controller Go High Fix reported
Improper use of metav1.Duration allows for Denial of ServiceCVE-2022-39272 · GHSA-F4P5-X4VC-MH4VVersion ranges need review. github.com/fluxcd/flux2github.com/fluxcd/helm-controller/api Go Medium Fix reported
Improper path handling in kustomization files allows path traversalCVE-2022-24877 · GHSA-J77R-2FXF-5JRWVersion ranges need review. github.com/fluxcd/flux2github.com/fluxcd/kustomize-controller Go Critical Fix reported
Improper kubeconfig validation allows arbitrary code executionCVE-2022-24817 · GHSA-VVMQ-FWMG-2GJC github.com/fluxcd/flux2github.com/fluxcd/helm-controller Go Critical Fix reported
Helm Controller denial of serviceCVE-2022-36049 · GHSA-P2G7-XWVR-RRW3 github.com/fluxcd/flux2github.com/fluxcd/helm-controller Go High Fix reported