Skip to content
OpenAdvisories

Package · Go

github.com/fluxcd/helm-controller

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 5.0
    CVE-2022-39272

    Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration

    Flux is an open and extensible continuous delivery solution for Kubernetes. Versions prior to 0.35.0 are subject to a Denial of Service. Users that have permissions to change Flux’s objects, either through a Flux source or directly within a cluster, can provi…

    fluxcd flux2 github.com/fluxcd/flux2 github.com/fluxcd/kustomize-controller Alpine Go
  • High 7.7
    CVE-2022-36049

    Flux2 Helm Controller denial of service

    Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A …

    fluxcd flux2 github.com/fluxcd/flux2 github.com/fluxcd/helm-controller Go
  • Critical 9.9
    CVE-2022-24817

    Improper kubeconfig validation allows arbitrary code execution

    Flux2 is an open and extensible continuous delivery solution for Kubernetes. Flux2 versions between 0.1.0 and 0.29.0, helm-controller 0.1.0 to v0.19.0, and kustomize-controller 0.1.0 to v0.23.0 are vulnerable to Code Injection via malicious Kubeconfig. In mul…

    fluxcd flux2 github.com/fluxcd/flux2 github.com/fluxcd/kustomize-controller Go