github.com/fluxcd/kustomize-controller
Go5 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting github.com/fluxcd/kustomize-controllerpage 1 of 1
- CVE-2021-41254HIGHCVSS 8.8EG 8.8✓ Fixed in 0.15.02021-11-12
kustomize-controller is a Kubernetes operator, specialized in running continuous delivery pipelines for infrastructure and workloads defined with Kubernetes manifests and assembled with Kustomize. Users that can create Kubernetes Secrets, …
- CVE-2022-24817CRITICALCVSS 9.9EG 9.9✓ Fixed in 0.23.02022-05-06
Flux2 is an open and extensible continuous delivery solution for Kubernetes. Flux2 versions between 0.1.0 and 0.29.0, helm-controller 0.1.0 to v0.19.0, and kustomize-controller 0.1.0 to v0.23.0 are vulnerable to Code Injection via maliciou…
- CVE-2022-24877CRITICALCVSS 9.9EG 9.9✓ Fixed in 0.24.02022-05-06
Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious `kustomization.yaml` allows an attacker to expose sensitive data from the controller’s pod filesystem …
- CVE-2022-24878HIGHCVSS 7.7EG 7.7✓ Fixed in 0.24.02022-05-06
Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious `kustomization.yaml` allows an attacker to cause a Denial of Service at the controller level. Workaround…
- CVE-2022-39272MEDIUMCVSS 5.0EG 5.0✓ Fixed in 0.29.02022-10-22
Flux is an open and extensible continuous delivery solution for Kubernetes. Versions prior to 0.35.0 are subject to a Denial of Service. Users that have permissions to change Flux’s objects, either through a Flux source or directly withi…
Check whether github.com/fluxcd/kustomize-controller is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for github.com/fluxcd/kustomize-controller CVEs against the assets you own.
Start Free Scan →