github.com/fluxcd/notification-controller vulnerabilities (Go)

2 vulnerabilities.

• github.com/fluxcd/notification-controller Go Flux notification-controller GCR Receiver missing email validation allows unauthorized reconciliation triggering CVE-2026-40109 Fix available 3.1 LowApril 9, 2026
• github.com/fluxcd/notification-controller Go Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration CVE-2022-39272 Fix available 5.0 MediumOctober 19, 2022