What’s Vulnerable › Products

fluxcd notification-controller vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your fluxcd notification-controller version is affected

Latest fluxcd notification-controller vulnerabilities

• CVE-2026-40109 — Flux notification-controller GCR Receiver missing email validation allows unauthorized reconciliation triggering (CVSS 3.1)
• CVE-2022-39272 — Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration (CVSS 4.3)