What’s Vulnerable › Products

fluxcd source-controller vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your fluxcd source-controller version is affected

Latest fluxcd source-controller vulnerabilities

• CVE-2026-47680 — Source controller: Improper path handling allows traversal (CVSS 5.3)
• CVE-2024-31216 — source-controller leaks theAzure Storage SAS token into logs on connection errors (CVSS 5.1)
• CVE-2022-39272 — Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration (CVSS 4.3)