Ffluxcd

Products

Exploited and recent CVEs

• CVE-2026-47680 Medium 5.3 Source controller: Improper path handling allows traversal 0.5%
• CVE-2026-40109 Low 3.1 Flux notification-controller GCR Receiver missing email validation allows unauthorized reconciliation triggering 0.1%
• CVE-2024-31216 Medium 5.1 source-controller leaks theAzure Storage SAS token into logs on connection errors 0.2%
• CVE-2022-39272 Medium 5.0 Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration 0.8%
• CVE-2022-36049 High 7.7 Flux2 Helm Controller denial of service 1.5%
• CVE-2022-36035 High 7.7 Flux CLI Workload Injection 0.3%
• CVE-2022-24878 High 7.7 Improper path handling in Kustomization files allows for denial of service 1.0%
• CVE-2022-24877 Critical 9.9 Improper path handling in kustomization files allows path traversal 1.2%
• CVE-2022-24817 Critical 9.9 Improper kubeconfig validation allows arbitrary code execution 1.1%
• CVE-2021-41254 High 8.8 Privilege escalation to cluster admin on multi-tenant environments 1.8%