Skip to content
Fluxcd Kustomize-controller vulnerabilities
-
fluxcd flux2, helm-controller, image-automation-controller +4 more +6 more
Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration
CVE-2022-39272
Fix available
5.0 Medium
-
fluxcd flux2, kustomize-controller +1 more
Improper path handling in Kustomization files allows for denial of service
CVE-2022-24878
Fix available
7.7 High
-
fluxcd flux2, helm-controller, kustomize-controller +2 more
Improper kubeconfig validation allows arbitrary code execution
CVE-2022-24817
Fix available
9.9 Critical
-
fluxcd flux2, kustomize-controller +1 more
Improper path handling in kustomization files allows path traversal
CVE-2022-24877
Fix available
9.9 Critical
-
fluxcd kustomize-controller
Privilege escalation to cluster admin on multi-tenant environments
CVE-2021-41254
Fix available
8.8 High