TI-2022-18648 CVE-2022-39272 · GHSA-f4p5-x4vc-mh4v
Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration
Priority LOW 24
Flux is an open and extensible continuous delivery solution for Kubernetes.
Vulnerabilities
6 records
TI-2022-16473 CVE-2022-36049 · GHSA-p2g7-xwvr-rrw3
Flux2 Helm Controller denial of service
Priority LOW 37
Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases.
TI-2022-16460 CVE-2022-36035 · GHSA-xwf3-6rgv-939r
Flux CLI Workload Injection
Priority LOW 36
Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration (like Git repositories), and automating updates to configuration when there is new code to deploy.
TI-2022-08688 CVE-2022-24878 · GHSA-7pwf-jg34-hxwp
Improper path handling in Kustomization files allows for denial of service
Priority LOW 36
Flux is an open and extensible continuous delivery solution for Kubernetes.
TI-2022-08687 CVE-2022-24877 · GHSA-j77r-2fxf-5jrw
Improper path handling in kustomization files allows path traversal
Priority MEDIUM 45
Flux is an open and extensible continuous delivery solution for Kubernetes.
TI-2022-08630 CVE-2022-24817 · GHSA-vvmq-fwmg-2gjc
Improper kubeconfig validation allows arbitrary code execution
Priority MEDIUM 45
Flux2 is an open and extensible continuous delivery solution for Kubernetes.