532 matches found
BIT-FLUX-2022-36049 Flux2 Helm Controller denial of service
Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...
BIT-FLUX-2022-36035 Flux CLI Workload Injection
Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration like Git repositories, and automating updates to configuration when there is new code to deploy. Flux CLI allows users to deploy Flux components into a Kubernetes cluster via command-line. The vulnerability allow...
BIT-FLUX-2022-24817 Improper kubeconfig validation allows arbitrary code execution
Flux2 is an open and extensible continuous delivery solution for Kubernetes. Flux2 versions between 0.1.0 and 0.29.0, helm-controller 0.1.0 to v0.19.0, and kustomize-controller 0.1.0 to v0.23.0 are vulnerable to Code Injection via malicious Kubeconfig. In multi-tenancy deployments this can also...
CVE-2025-47914 vulnerabilities
Vulnerabilities for packages: flux, promxy, gitea, flux-source-controller, minio-object-browser, terraform-docs, rancher-telemetry, crossplane-provider-azure-sql, scorecard, chezmoi, k8sgateway, cert-manager-webhook-pdns, crossplane-provider-aws-memorydb, cfssl, tfsec, istio, rke2-cloud-provider,...
CVE-2025-58181 vulnerabilities
Vulnerabilities for packages: flux, promxy, gitea, flux-source-controller, terraform-docs, crossplane-provider-azure-sql, scorecard, chezmoi, pdfcpu, k8sgateway, cert-manager-webhook-pdns, crossplane-provider-aws-memorydb, cfssl, trivy, tfsec, istio, rke2-cloud-provider, migrate, chisel, bom,...
GHSA-F6X5-JH6R-WRFV vulnerabilities
Vulnerabilities for packages: flux, promxy, gitea, flux-source-controller, minio-object-browser, terraform-docs, rancher-telemetry, crossplane-provider-azure-sql, scorecard, chezmoi, k8sgateway, cert-manager-webhook-pdns, crossplane-provider-aws-memorydb, cfssl, tfsec, istio, rke2-cloud-provider,...
GHSA-J5W8-Q4QC-RX2X vulnerabilities
Vulnerabilities for packages: flux, promxy, gitea, flux-source-controller, terraform-docs, crossplane-provider-azure-sql, scorecard, chezmoi, pdfcpu, k8sgateway, cert-manager-webhook-pdns, crossplane-provider-aws-memorydb, cfssl, trivy, tfsec, istio, rke2-cloud-provider, migrate, chisel, bom,...
EUVD-2025-36690
FluxCP is a web-based Control Panel for rAthena servers written in PHP. A critical Cross-Site Request Forgery CSRF vulnerability exists in the FluxCP-based website template used by multiple rAthena/Ragnarok servers. State-changing POST endpoints accept browser-initiated requests that are authoriz...
EUVD-2008-2681
Malware in sbrugna...
EUVD-2022-3043
Malicious code in bioql PyPI...
EUVD-2022-7087
Malicious code in bioql PyPI...
EUVD-2022-6984
Malicious code in bioql PyPI...
EUVD-2022-38802
Malicious code in bioql PyPI...
EUVD-2022-4298
Malicious code in bioql PyPI...
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: ipfs-cluster, wait-for-port, kapp-controller, ini-file, amazon-cloudwatch-agent-operator, kubernetes-dashboard-api, flux, steampipe, nri-mysql, nodetaint, cluster-api-provider-vsphere, rabbitmq-default-user-credential-updater, terraform-mcp-server, kind, opa,...
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: render-template, consul, cloud-sql-proxy, docker-credential-gcr, eksctl, gcp-compute-persistent-disk-csi-driver, consul-k8s, regclient, nginx-prometheus-exporter, spark-operator, aws-otel-collector, cerbos, nri-redis, docker-machine-driver-harvester, cni-plugins,...
CVE-2024-51491 vulnerabilities
Vulnerabilities for packages: flux-fips...
GHSA-QJH3-4J3H-VMWP vulnerabilities
Vulnerabilities for packages: flux-fips...
