TI-2022-18648 CVE-2022-39272 · GHSA-f4p5-x4vc-mh4v
Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration
Priority LOW 24
Flux is an open and extensible continuous delivery solution for Kubernetes.
Vulnerabilities
5 records
TI-2022-08688 CVE-2022-24878 · GHSA-7pwf-jg34-hxwp
Improper path handling in Kustomization files allows for denial of service
Priority LOW 36
Flux is an open and extensible continuous delivery solution for Kubernetes.
TI-2022-08687 CVE-2022-24877 · GHSA-j77r-2fxf-5jrw
Improper path handling in kustomization files allows path traversal
Priority MEDIUM 45
Flux is an open and extensible continuous delivery solution for Kubernetes.
TI-2022-08630 CVE-2022-24817 · GHSA-vvmq-fwmg-2gjc
Improper kubeconfig validation allows arbitrary code execution
Priority MEDIUM 45
Flux2 is an open and extensible continuous delivery solution for Kubernetes.
TI-2021-18089 CVE-2021-41254 · GHSA-35rf-v2jv-gfg7
Privilege escalation to cluster admin on multi-tenant environments
Priority MEDIUM 42
kustomize-controller is a Kubernetes operator, specialized in running continuous delivery pipelines for infrastructure and workloads defined with Kubernetes manifests and assembled with Kustomize.