Fluxcd

9 CVEs across 7 Fluxcd products. Browse Fluxcd vulnerabilities, severities, and proof-of-concept exploits.

Fluxcd products with known CVEs

ProductCVEs
Flux26
Kustomize-Controller5
Helm-Controller3
Notification-Controller2
Source-Controller2
Image-Automation-Controller1
Image-Reflector-Controller1
Fluxcd CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-40109Low3.12026-04-09Flux notification-controller is the event forwarder and notification dispatcher for the GitOps Toolkit controllers. Prior to 1.8.3, the gcr Receiver type in Fl…
CVE-2024-31216Medium5.12024-05-15The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatibl…
CVE-2022-39272Medium5.02022-10-22Flux is an open and extensible continuous delivery solution for Kubernetes. Versions prior to 0.35.0 are subject to a Denial of Service. Users that have permis…
CVE-2022-36049High7.72022-09-07Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to d…
CVE-2022-36035High7.72022-08-31Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration (like Git repositories), and automating updates to configuration when ther…
CVE-2022-24878High7.72022-05-06Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious `kustomization.yaml` all…
CVE-2022-24877Critical9.92022-05-06Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious `kustomization.yaml` all…
CVE-2022-24817Critical9.92022-05-06Flux2 is an open and extensible continuous delivery solution for Kubernetes. Flux2 versions between 0.1.0 and 0.29.0, helm-controller 0.1.0 to v0.19.0, and kus…
CVE-2021-41254High8.82021-11-12kustomize-controller is a Kubernetes operator, specialized in running continuous delivery pipelines for infrastructure and workloads defined with Kubernetes ma…