What’s Vulnerable › Products

fluxcd kustomize-controller vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your fluxcd kustomize-controller version is affected

Latest fluxcd kustomize-controller vulnerabilities

• CVE-2022-39272 — Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration (CVSS 4.3)
• CVE-2022-24878 — Improper path handling in Kustomization files allows for denial of service (CVSS 6.5)
• CVE-2022-24877 — Improper path handling in kustomization files allows path traversal (CVSS 8.8)
• CVE-2022-24817 — Improper kubeconfig validation allows arbitrary code execution (CVSS 9.9)
• CVE-2021-41254 — Privilege escalation to cluster admin on multi-tenant environments (CVSS 8.8)