Skip to content
OpenAdvisories

Package · Go

github.com/fluxcd/helm-controller

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2022-24817

    Improper kubeconfig validation allows arbitrary code execution

    Flux2 is an open and extensible continuous delivery solution for Kubernetes. Flux2 versions between 0.1.0 and 0.29.0, helm-controller 0.1.0 to v0.19.0, and kustomize-controller 0.1.0 to v0.23.0 are vulnerable to Code Injection via malicious Kubeconfig. In mul…

    fluxcd flux2 github.com/fluxcd/flux2 github.com/fluxcd/kustomize-controller Go