CVE-2022-39272
Published Oct 22, 2022Flux is an open and extensible continuous delivery solution for Kubernetes. Versions prior to 0.35.0 are subject to a Denial of Service. Users that have permissions to change Flux…
Vendor archive
fluxcd CVEs
Beta · best-effort7 CVEs tagged to vendor fluxcd — 2 Critical, 4 High, 1 Medium, 0 Low, 0 Unrated.
CVE-2022-36049
Published Sep 7, 2022Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage…
CVE-2022-36035
Published Aug 31, 2022Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration (like Git repositories), and automating updates to configuration when there is new code to dep…
CVE-2022-24878
Published May 6, 2022Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious `kustomization.yaml` allows an attacker to c…
CVE-2022-24877
Published May 6, 2022Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious `kustomization.yaml` allows an attacker to e…
CVE-2022-24817
Published May 6, 2022Flux2 is an open and extensible continuous delivery solution for Kubernetes. Flux2 versions between 0.1.0 and 0.29.0, helm-controller 0.1.0 to v0.19.0, and kustomize-controller 0.…
CVE-2021-41254
Published Nov 12, 2021kustomize-controller is a Kubernetes operator, specialized in running continuous delivery pipelines for infrastructure and workloads defined with Kubernetes manifests and assemble…
Showing 1-7 of 7 CVEsPage 1 of 1