github.com/fluxcd/flux2 vulnerabilities (Go)

6 vulnerabilities.

• github.com/fluxcd/flux2 Go Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration CVE-2022-39272 Fix available 5.0 MediumOctober 19, 2022
• github.com/fluxcd/flux2 Go Flux2 Helm Controller denial of service CVE-2022-36049 Fix available 7.7 HighSeptember 7, 2022
• github.com/fluxcd/flux2 Go Flux CLI Workload Injection CVE-2022-36035 Fix available 7.7 HighAugust 31, 2022
• github.com/fluxcd/flux2 Go Improper path handling in Kustomization files allows for denial of service CVE-2022-24878 Fix available 7.7 HighMay 6, 2022
• github.com/fluxcd/flux2 Go Improper kubeconfig validation allows arbitrary code execution CVE-2022-24817 Fix available 9.9 CriticalMay 6, 2022
• github.com/fluxcd/flux2 Go Improper path handling in kustomization files allows path traversal CVE-2022-24877 Fix available 9.9 CriticalMay 4, 2022