fluxcd

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

fluxcd records in CISA KEV

No fluxcd vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Flux2 6 records MEDIUM Kustomize-controller 5 records MEDIUM Helm-controller 3 records MEDIUM Image-automation-controller 1 record LOW Image-reflector-controller 1 record LOW Notification-controller 1 record LOW Source-controller 1 record LOW

Records

1 record in Notification-controller · all components

TI-2022-18648 CVE-2022-39272 · GHSA-f4p5-x4vc-mh4v

Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration

LOW 24

Flux is an open and extensible continuous delivery solution for Kubernetes.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00788 Published 2022-10-21 Fixed in 0.35.0, 0.30.0 +8 CWE-1284

Open these records in search →