github.com/fluxcd/source-controller vulnerabilities (Go)

3 vulnerabilities.

• github.com/fluxcd/source-controller Go Source controller: Improper path handling allows traversal CVE-2026-47680 Fix available 5.3 MediumJune 5, 2026
• github.com/fluxcd/source-controller Go source-controller leaks theAzure Storage SAS token into logs on connection errors CVE-2024-31216 Fix available 5.1 MediumMay 15, 2024
• github.com/fluxcd/source-controller Go Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration CVE-2022-39272 Fix available 5.0 MediumOctober 19, 2022