90 matches found
CVE-2025-58189 vulnerabilities
Vulnerabilities for packages: age, terraform-provider-azuread-fips, aws-iam-authenticator-fips, multus-cni-fips, azurefile-csi-fips, ko, kubevela-fips, cloudprober-fips, kubernetes-event-exporter, etcd, stakater-reloader-fips, flyte, prometheus-postgres-exporter, tfsec, vault-csi-provider,...
CVE-2025-61723 vulnerabilities
Vulnerabilities for packages: age, terraform-provider-azuread-fips, aws-iam-authenticator-fips, multus-cni-fips, azurefile-csi-fips, ko, kubevela-fips, cloudprober-fips, kubernetes-event-exporter, etcd, stakater-reloader-fips, flyte, prometheus-postgres-exporter, tfsec, vault-csi-provider,...
CVE-2025-61724 vulnerabilities
Vulnerabilities for packages: age, terraform-provider-azuread-fips, aws-iam-authenticator-fips, multus-cni-fips, azurefile-csi-fips, ko, kubevela-fips, cloudprober-fips, kubernetes-event-exporter, etcd, stakater-reloader-fips, flyte, prometheus-postgres-exporter, tfsec, vault-csi-provider,...
GHSA-7WWX-XJ66-R44X vulnerabilities
Vulnerabilities for packages: age, terraform-provider-azuread-fips, aws-iam-authenticator-fips, multus-cni-fips, azurefile-csi-fips, ko, kubevela-fips, cloudprober-fips, kubernetes-event-exporter, etcd, stakater-reloader-fips, flyte, prometheus-postgres-exporter, tfsec, vault-csi-provider,...
GHSA-9GCR-GP5F-JW27 vulnerabilities
Vulnerabilities for packages: age, terraform-provider-azuread-fips, aws-iam-authenticator-fips, multus-cni-fips, azurefile-csi-fips, ko, kubevela-fips, cloudprober-fips, kubernetes-event-exporter, etcd, stakater-reloader-fips, flyte, prometheus-postgres-exporter, tfsec, vault-csi-provider,...
GHSA-WCW9-47FP-RRFR vulnerabilities
Vulnerabilities for packages: age, terraform-provider-azuread-fips, aws-iam-authenticator-fips, multus-cni-fips, azurefile-csi-fips, ko, kubevela-fips, cloudprober-fips, kubernetes-event-exporter, etcd, stakater-reloader-fips, flyte, prometheus-postgres-exporter, tfsec, vault-csi-provider,...
GHSA-RJCG-56PH-3QVG vulnerabilities
Vulnerabilities for packages: age, terraform-provider-azuread-fips, aws-iam-authenticator-fips, multus-cni-fips, azurefile-csi-fips, ko, kubevela-fips, cloudprober-fips, kubernetes-event-exporter, etcd, stakater-reloader-fips, flyte, prometheus-postgres-exporter, tfsec, vault-csi-provider,...
EUVD-2022-3043
Malicious code in bioql PyPI...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: newrelic-fluent-bit-output, aws-iam-authenticator-fips, karma, azurefile-csi-fips, kubevela-fips, helm, consul-fips, polaris, etcd, stakater-reloader-fips, flyte, kubernetes-replicator-fips, polaris-fips, prometheus-postgres-exporter, aws-network-policy-agent,...
GHSA-FGQ5-Q76C-GX78 vulnerabilities
Vulnerabilities for packages: velero, kube-bench, mockery, newrelic-fluent-bit-output, rqlite, memcached-exporter, configmap-reload, php-fpmexporter, envoy-ratelimit, petname, pombump, wireguard-go, eksctl, controller-gen, hubble-ui, ytt, nuclei, nri-elasticsearch,...
CVE-2025-27144 vulnerabilities
Vulnerabilities for packages: kiali, hydra, rook, kyverno-notation-aws, sftpgo-plugin-kms, oauth2-proxy, sops, trufflehog, distribution, tkn, spire-server, cert-manager-istio-csr, k3s, bank-vaults, rekor, step-kms-plugin, containerd, spiffe-helper, melange, pulumi, traefik, grpc-health-probe,...
GHSA-C6GW-W398-HV78 vulnerabilities
Vulnerabilities for packages: goreleaser, aactl, zarf, argocd-image-updater-fips, ko, guac, consul-fips, policy-controller-fips, sops, packer-fips, kots, harbor, apko, flyte, traefik-fips, octo-sts, spire-controller-manager, istio-pilot-agent, kiali-fips, ksops, timestamp-authority, dagdotdev,...
GHSA-C6GW-W398-HV78 vulnerabilities
Vulnerabilities for packages: kiali, hydra, rook, kyverno-notation-aws, sftpgo-plugin-kms, oauth2-proxy, sops, trufflehog, distribution, tkn, spire-server, cert-manager-istio-csr, k3s, bank-vaults, rekor, step-kms-plugin, containerd, spiffe-helper, melange, pulumi, traefik, grpc-health-probe,...
CVE-2022-24877
Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious kustomization.yaml allows an attacker to expose sensitive data from the controller’s pod filesystem and possibly privilege escalation in multi-tenancy deployments...
GHSA-32GQ-X56H-299C vulnerabilities
Vulnerabilities for packages: age, grafana, age-fips, flux-kustomize-controller-fips, ksops, grafana-fips, litestream, sops, sops-fips, flux-kustomize-controller, chezmoi...
GO-2022-0260 Privilege escalation to cluster admin on multi-tenant environments in github.com/fluxcd/kustomize-controller
Privilege escalation to cluster admin on multi-tenant environments in github.com/fluxcd/kustomize-controller...
OPENSUSE-SU-2024:13299-1 kustomize-5.1.1-1.1 on GA media
These are all security issues fixed in the kustomize-5.1.1-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: zot, druid, velero, hugo, pulumi, grafana-agent-operator, terragrunt, sigstore-scaffolding, cortex, argo-events, rook, chezmoi, flyte, step, nuclei, secrets-store-csi-driver-provider-azure, hugo-extended, opentelemetry-collector-contrib, buildkitd, prometheus-operato...
BIT-KUSTOMIZE-2022-24877 Improper path handling in kustomization files allows path traversal
Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious kustomization.yaml allows an attacker to expose sensitive data from the controller’s pod filesystem and possibly privilege escalation in multi-tenancy deployments...
BIT-KUSTOMIZE-2022-24878 Improper path handling in Kustomization files allows for denial of service
Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious kustomization.yaml allows an attacker to cause a Denial of Service at the controller level. Workarounds include automated tooling in the user's CI/CD pipeline to...