FL
Vendor
fluxcd
20
CVEs
0
On KEV
0
New 30D
Products
FL9.9
flux2
fluxcd
6 CVEs0 on KEV0 new
KU9.9
Kustomize-controller
Fluxcd
5 CVEs0 on KEV0 new
HE9.9
Helm-controller
Fluxcd
3 CVEs0 on KEV0 new
NO4.3
notification-controller
fluxcd
2 CVEs0 on KEV0 new
SO5.3
source-controller
fluxcd
2 CVEs0 on KEV0 new
IM4.3
Image-automation-controller
Fluxcd
1 CVEs0 on KEV0 new
IM4.3
Image-reflector-controller
Fluxcd
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-47680 | SO source-controller fluxcd | 5.3 | Sep 8 | Source controller: Improper path handling allows traversal |
| CVE-2026-40109 | NO notification-controller fluxcd | 3.1 | Apr 9 | Flux notification-controller GCR Receiver missing email validation allows unauthorized reconciliation triggering |
| CVE-2022-39272 | FL flux2 fluxcd | 4.3 | Oct 21 | Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration |
| CVE-2022-36049 | HE Helm-controller Fluxcd | 7.5 | Sep 7 | Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage… |
| CVE-2022-36035 | FL Flux2 Fluxcd | 7.8 | Aug 31 | Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration (like Git repositories), and automating updates to configuration when there is new code to… |
| CVE-2022-24878 | FL Flux2 Fluxcd | 6.5 | May 6 | Flux is an open and extensible continuous delivery solution for Kubernetes |
| CVE-2022-24877 | FL Flux2 Fluxcd | 8.8 | May 6 | Flux is an open and extensible continuous delivery solution for Kubernetes |
| CVE-2022-24817 | FL Flux2 Fluxcd | 9.9 | May 6 | Flux2 is an open and extensible continuous delivery solution for Kubernetes |
| CVE-2021-41254 | KU Kustomize-controller Fluxcd | 8.8 | Nov 12 | kustomize-controller is a Kubernetes operator, specialized in running continuous delivery pipelines for infrastructure and workloads defined with Kubernetes manifests and… |
