What’s Vulnerable › Products

fluxcd flux2 vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your fluxcd flux2 version is affected

Latest fluxcd flux2 vulnerabilities

• CVE-2022-39272 — Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration (CVSS 4.3)
• CVE-2022-36049 — Flux2 Helm Controller denial of service (CVSS 7.5)
• CVE-2022-36035 — Flux CLI Workload Injection (CVSS 7.8)
• CVE-2022-24878 — Improper path handling in Kustomization files allows for denial of service (CVSS 6.5)
• CVE-2022-24877 — Improper path handling in kustomization files allows path traversal (CVSS 8.8)
• CVE-2022-24817 — Improper kubeconfig validation allows arbitrary code execution (CVSS 9.9)