Malicious code in flux-example-routing (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41564 Malicious code in flux-example-routing (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: helm-push, nova, pluto, helm-docs, consul-k8s, cert-manager-cmctl, chartmuseum, flux-source-controller, helm-operator, flux, cerbos, eksctl, cilium-cli, k8sgpt, zarf, headlamp, helm-mapkubeapis, cluster-api-helm-controller, kargo, helm-set-status, istio, trivy, tw,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: helm-push, nova, pluto, helm-docs, consul-k8s, cert-manager-cmctl, chartmuseum, flux-source-controller, helm-operator, flux, cerbos, eksctl, cilium-cli, k8sgpt, zarf, headlamp, helm-mapkubeapis, cluster-api-helm-controller, kargo, helm-set-status, istio, trivy,...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: helm-push, nova, pluto, helm-docs, consul-k8s, cert-manager-cmctl, chartmuseum, flux-source-controller, helm-operator, flux, cerbos, eksctl, cilium-cli, k8sgpt, zarf, headlamp, helm-mapkubeapis, cluster-api-helm-controller, kargo, helm-set-status, istio, trivy,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: helm-push, nova, pluto, helm-docs, consul-k8s, cert-manager-cmctl, chartmuseum, flux-source-controller, helm-operator, flux, cerbos, eksctl, cilium-cli, k8sgpt, zarf, headlamp, helm-mapkubeapis, cluster-api-helm-controller, kargo, helm-set-status, istio, trivy, tw,...

Malicious code in dvrt-flux-react-router (npm)

The package dvrt-flux-react-router was found to contain malicious code...

MAL-2025-19005 Malicious code in dvrt-flux-react-router (npm)

The package dvrt-flux-react-router was found to contain malicious code...

CVE-2025-47907 vulnerabilities

Vulnerabilities for packages: pguser, newrelic-fluent-bit-output, fuse-overlayfs-snapshotter, ghaudit, flux, eksctl, helm-mapkubeapis, helm-set-status, trivy-operator, smarter-device-manager, lazygit, opensearch-k8s-operator, ip-masq-agent, crossplane-provider-azure-sql, zot, gobump, nri-redis,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, incert, nerdctl, aws-flb-kinesis-fips, promxy-fips, cert-manager-fips, secrets-store-csi-driver-provider-azure, certificate-transparency-fips, harbor-scanner-trivy-fips, opentelemetry-collector-contrib,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: helm-push, pluto, helm-docs, consul-k8s, cert-manager-cmctl, chartmuseum, flux-source-controller, helm-operator, cerbos, eksctl, cilium-cli, k8sgpt, zarf, cluster-api-helm-controller, kargo, istio, rancher-helm, trivy, tw, linkerd2, envoy-gateway, rancher-fleet,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: helm-push, pluto, helm-docs, consul-k8s, cert-manager-cmctl, chartmuseum, flux-source-controller, helm-operator, cerbos, eksctl, cilium-cli, k8sgpt, zarf, cluster-api-helm-controller, kargo, istio, rancher-helm, trivy, tw, linkerd2, envoy-gateway, rancher-fleet,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: helm-push, kargo, flux, cerbos-fips, chart-testing-fips, consul-k8s-fips, envoy-gateway-fips, helm-operator, teleport, linkerd2-fips, helm-operator-fips, envoy-gateway, k9s, flux-helm-controller, chartmuseum-fips, cilium-cli, cert-manager-cmctl, consul-k8s,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: helm-push, kargo, flux, cerbos-fips, chart-testing-fips, consul-k8s-fips, envoy-gateway-fips, helm-operator, teleport, linkerd2-fips, helm-operator-fips, envoy-gateway, k9s, flux-helm-controller, chartmuseum-fips, cilium-cli, cert-manager-cmctl, consul-k8s,...

CVE-2022-39272

Flux is an open and extensible continuous delivery solution for Kubernetes. Versions prior to 0.35.0 are subject to a Denial of Service. Users that have permissions to change Flux’s objects, either through a Flux source or directly within a cluster, can provide invalid data to fields .spec.interv...

CVE-2024-43806 affecting package flux for versions less than 0.194.5-2

CVE-2024-43806 affecting package flux for versions less than 0.194.5-2. A patched version of the package is available...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: helm-push, pluto, helm-docs, consul-k8s, cert-manager-cmctl, chartmuseum, flux-source-controller, helm-operator, flux, eksctl, cilium-cli, zarf, cluster-api-helm-controller, trivy, rancher-helm, tw, k8ssandra-client, flux-helm-controller, kubescape, kots, k9s,...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: helm-push, pluto, helm-docs, consul-k8s, cert-manager-cmctl, chartmuseum, flux-source-controller, helm-operator, flux, eksctl, cilium-cli, zarf, cluster-api-helm-controller, trivy, rancher-helm, tw, k8ssandra-client, flux-helm-controller, kubescape, kots, k9s,...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: helm-push, pluto, helm-docs, consul-k8s, cert-manager-cmctl, chartmuseum, flux-source-controller, helm-operator, flux, eksctl, cilium-cli, zarf, cluster-api-helm-controller, trivy, rancher-helm, tw, k8ssandra-client, flux-helm-controller, kubescape, kots, k9s,...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: helm-push, pluto, helm-docs, consul-k8s, cert-manager-cmctl, chartmuseum, flux-source-controller, helm-operator, flux, eksctl, cilium-cli, zarf, cluster-api-helm-controller, trivy, rancher-helm, tw, k8ssandra-client, flux-helm-controller, kubescape, kots, k9s,...