github.com/fluxcd/kustomize-controller vulnerabilities (Go)

5 vulnerabilities.

• github.com/fluxcd/kustomize-controller Go Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration CVE-2022-39272 Fix available 5.0 MediumOctober 19, 2022
• github.com/fluxcd/kustomize-controller Go Improper path handling in Kustomization files allows for denial of service CVE-2022-24878 Fix available 7.7 HighMay 6, 2022
• github.com/fluxcd/kustomize-controller Go Improper kubeconfig validation allows arbitrary code execution CVE-2022-24817 Fix available 9.9 CriticalMay 6, 2022
• github.com/fluxcd/kustomize-controller Go Improper path handling in kustomization files allows path traversal CVE-2022-24877 Fix available 9.9 CriticalMay 4, 2022
• github.com/fluxcd/kustomize-controller Go Privilege escalation to cluster admin on multi-tenant environments CVE-2021-41254 Fix available 8.8 HighNovember 12, 2021