Skip to content
OpenAdvisories

Package · Go

github.com/fluxcd/flux2

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.9
    CVE-2022-24877

    Improper path handling in kustomization files allows path traversal

    Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious `kustomization.yaml` allows an attacker to expose sensitive data from the controller’s pod filesystem and possibly privilege…

    fluxcd flux2 github.com/fluxcd/flux2 github.com/fluxcd/kustomize-controller Go
  • Critical 9.9
    CVE-2022-24817

    Improper kubeconfig validation allows arbitrary code execution

    Flux2 is an open and extensible continuous delivery solution for Kubernetes. Flux2 versions between 0.1.0 and 0.29.0, helm-controller 0.1.0 to v0.19.0, and kustomize-controller 0.1.0 to v0.23.0 are vulnerable to Code Injection via malicious Kubeconfig. In mul…

    fluxcd flux2 github.com/fluxcd/flux2 github.com/fluxcd/kustomize-controller Go