fluxcd Flux2 Vulnerabilities

Fluxcd Flux2 vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

21 October 2022

Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration
CVE-2022-39272
FluxcdFlux25MEDIUM

7 September 2022

Flux2 Helm Controller denial of service
CVE-2022-36049
FluxcdFlux27.7HIGH

31 August 2022

Flux CLI Workload Injection
CVE-2022-36035
FluxcdFlux27.7HIGH

6 May 2022

Improper path handling in Kustomization files allows for denial of service
CVE-2022-24878
FluxcdFlux27.7HIGH
Improper path handling in kustomization files allows path traversal
CVE-2022-24877
FluxcdFlux29.9CRITICAL
Improper kubeconfig validation allows arbitrary code execution
CVE-2022-24817
FluxcdFlux29.9CRITICAL