VendorsFluxcdkustomize-controllerall versions
Vulnerabilities

Fluxcd Flux

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2022-24877
Improper path handling in kustomization files allows path traversal
Published 2022-05-06 · Modified
9.9EPSS 0.012
CVE-2022-24817
Improper kubeconfig validation allows arbitrary code execution
Published 2022-05-06 · Modified
9.9EPSS 0.011
CVE-2021-41254
Privilege escalation to cluster admin on multi-tenant environments
Published 2021-11-12 · Modified
9.0EPSS 0.018
CVE-2022-24878
Improper path handling in Kustomization files allows for denial of service
Published 2022-05-06 · Modified
7.7EPSS 0.010
CVE-2022-39272
Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration
Published 2022-10-21 · Modified
5.0EPSS 0.007