Skip to content
OpenAdvisories

Product · fluxcd

source-controller

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-47680

    Source controller: Improper path handling allows traversal

    The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of …

    fluxcd source-controller github.com/fluxcd/source-controller Go
  • Medium 5.1
    CVE-2024-31216

    source-controller leaks theAzure Storage SAS token into logs on connection errors

    The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component…

    fluxcd source-controller github.com/fluxcd/source-controller Go