Skip to content
OpenAdvisories

Package · Go

github.com/fluxcd/source-controller

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-47680

    Source controller: Improper path handling allows traversal

    The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of …

    fluxcd source-controller github.com/fluxcd/source-controller Go
  • Medium 5.1
    CVE-2024-31216

    source-controller leaks theAzure Storage SAS token into logs on connection errors

    The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component…

    fluxcd source-controller github.com/fluxcd/source-controller Go
  • Medium 5.0
    CVE-2022-39272

    Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration

    Flux is an open and extensible continuous delivery solution for Kubernetes. Versions prior to 0.35.0 are subject to a Denial of Service. Users that have permissions to change Flux’s objects, either through a Flux source or directly within a cluster, can provi…

    fluxcd flux2 github.com/fluxcd/flux2 github.com/fluxcd/kustomize-controller Alpine Go