CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: flux-source-controller, k9s, kubescape, eksctl, tw, chartmuseum, chart-testing, kots, helm-set-status, helm-docs, cluster-api-helm-controller, rancher-fleet, consul-k8s, helm-mapkubeapis, envoy-gateway, trivy-operator, flux, kargo, k8sgpt, istio, linkerd2,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: flux-source-controller, k9s, kubescape, eksctl, chartmuseum, chart-testing, kots, helm-set-status, helm-docs, cluster-api-helm-controller, rancher-fleet, consul-k8s, helm-mapkubeapis, envoy-gateway, trivy-operator, flux, kargo, k8sgpt, istio, linkerd2,...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: flux-source-controller, k9s, kubescape, eksctl, chartmuseum, chart-testing, kots, helm-set-status, helm-docs, cluster-api-helm-controller, rancher-fleet, consul-k8s, helm-mapkubeapis, envoy-gateway, trivy-operator, flux, kargo, k8sgpt, istio, linkerd2,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: flux-source-controller, k9s, kubescape, eksctl, tw, chartmuseum, chart-testing, kots, helm-set-status, helm-docs, cluster-api-helm-controller, rancher-fleet, consul-k8s, helm-mapkubeapis, envoy-gateway, trivy-operator, flux, kargo, k8sgpt, istio, linkerd2,...

MAL-2025-19005 Malicious code in dvrt-flux-react-router (npm)

The package dvrt-flux-react-router was found to contain malicious code...

Malicious code in dvrt-flux-react-router (npm)

The package dvrt-flux-react-router was found to contain malicious code...

CVE-2025-47907 vulnerabilities

Vulnerabilities for packages: rke2-cloud-provider, witness, k3s, swagger, crossplane-provider-azure-managedidentity, sbom-scorecard, runc, metallb, kubecolor, verticadb-operator, kubewatch, nuclei, conftest, minio, azure-ipam, aws-flb-cloudwatch, wolfictl, grpc-health-probe, kine, terraform,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: azure-service-operator-fips, argo-workflows-fips, nats-fips, kyverno-policy-reporter-kyverno-plugin-fips, helm-operator-fips, gofumpt, cluster-api-helm-controller, memcached-exporter, metallb-fips, external-dns-fips, amazon-ssm-agent, pulumi-language-java,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: flux-source-controller, rancher-helm, eksctl, tw, chartmuseum, chart-testing, kots, helm-docs, cluster-api-helm-controller, rancher-fleet, consul-k8s, envoy-gateway, kargo, k8sgpt, istio, linkerd2, cert-manager-cmctl, k8ssandra-client, helm-push, cilium-cli, trivy,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: flux-source-controller, rancher-helm, eksctl, tw, chartmuseum, chart-testing, kots, helm-docs, cluster-api-helm-controller, rancher-fleet, consul-k8s, envoy-gateway, kargo, k8sgpt, istio, linkerd2, cert-manager-cmctl, k8ssandra-client, helm-push, cilium-cli, trivy,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, cilium-cli, helm-operator, helm-push, helm-operator-fips, flux-helm-controller-fips, kots, cluster-api-helm-controller, cert-manager-cmctl, eksctl, tw, flux-source-controller-fips, helm-docs, flux-source-controller, teleport, envoy-gateway-fips,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, cilium-cli, helm-operator, helm-push, helm-operator-fips, flux-helm-controller-fips, kots, cluster-api-helm-controller, cert-manager-cmctl, eksctl, tw, flux-source-controller-fips, helm-docs, flux-source-controller, teleport, envoy-gateway-fips,...

CVE-2022-39272

Flux is an open and extensible continuous delivery solution for Kubernetes. Versions prior to 0.35.0 are subject to a Denial of Service. Users that have permissions to change Flux’s objects, either through a Flux source or directly within a cluster, can provide invalid data to fields .spec.interv...

CVE-2024-43806 affecting package flux for versions less than 0.194.5-2

CVE-2024-43806 affecting package flux for versions less than 0.194.5-2. A patched version of the package is available...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: flux-source-controller, rancher-helm, kubescape, eksctl, tw, chartmuseum, chart-testing, kots, helm-docs, cluster-api-helm-controller, consul-k8s, flux, cert-manager-cmctl, k8ssandra-client, helm-push, cilium-cli, trivy, pluto, zot, flux-helm-controller, k9s,...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: flux-source-controller, rancher-helm, kubescape, eksctl, tw, chartmuseum, chart-testing, kots, helm-docs, cluster-api-helm-controller, consul-k8s, flux, cert-manager-cmctl, k8ssandra-client, helm-push, cilium-cli, trivy, pluto, zot, flux-helm-controller, k9s,...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: flux-source-controller, rancher-helm, kubescape, eksctl, tw, chartmuseum, chart-testing, kots, helm-docs, cluster-api-helm-controller, consul-k8s, flux, cert-manager-cmctl, k8ssandra-client, helm-push, cilium-cli, trivy, pluto, zot, flux-helm-controller, k9s,...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: flux-source-controller, rancher-helm, kubescape, eksctl, tw, chartmuseum, chart-testing, kots, helm-docs, cluster-api-helm-controller, consul-k8s, flux, cert-manager-cmctl, k8ssandra-client, helm-push, cilium-cli, trivy, pluto, zot, flux-helm-controller, k9s,...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: cilium-cli, helm-operator, helm-push, helm-operator-fips, flux-helm-controller-fips, kots, cluster-api-helm-controller, cert-manager-cmctl, eksctl, tw, flux-source-controller-fips, helm-docs, flux-source-controller, chart-testing-fips, kubescape, zarf, flux,...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: cilium-cli, helm-operator, helm-push, helm-operator-fips, flux-helm-controller-fips, kots, cluster-api-helm-controller, cert-manager-cmctl, eksctl, tw, flux-source-controller-fips, helm-docs, flux-source-controller, chart-testing-fips, kubescape, zarf, flux,...