Read the docs

fluxcd

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

fluxcd records in CISA KEV

No fluxcd vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Flux2 6 records MEDIUM Kustomize-controller 5 records MEDIUM Helm-controller 3 records MEDIUM Image-automation-controller 1 record LOW Image-reflector-controller 1 record LOW Notification-controller 1 record LOW Source-controller 1 record LOW

Records

6 records in Flux2 · all components

TI-2022-16473 CVE-2022-36049 · GHSA-p2g7-xwvr-rrw3

Flux2 Helm Controller denial of service

Priority LOW 37

Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.01542 Published 2022-09-07 Fixed in 0.23.0, 0.32.0 CWE-400
TI-2022-16460 CVE-2022-36035 · GHSA-xwf3-6rgv-939r

Flux CLI Workload Injection

Priority LOW 36

Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration (like Git repositories), and automating updates to configuration when there is new code to deploy.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00318 Published 2022-08-31 Fixed in 0.32.0 CWE-22
Open these records in search →