Skip to content
OpenAdvisories

Package · Go

github.com/fluxcd/kustomize-controller

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.7
    CVE-2022-24878

    Improper path handling in Kustomization files allows for denial of service

    Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious `kustomization.yaml` allows an attacker to cause a Denial of Service at the controller level. Workarounds include automated …

    fluxcd flux2 github.com/fluxcd/flux2 github.com/fluxcd/kustomize-controller Go
  • High 8.8
    CVE-2021-41254

    Privilege escalation to cluster admin on multi-tenant environments

    kustomize-controller is a Kubernetes operator, specialized in running continuous delivery pipelines for infrastructure and workloads defined with Kubernetes manifests and assembled with Kustomize. Users that can create Kubernetes Secrets, Service Accounts and…

    fluxcd kustomize-controller github.com/fluxcd/kustomize-controller Go