Malicious code in flux-example-routing (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41564 Malicious code in flux-example-routing (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: kots, nova, flux-helm-controller, envoy-gateway, helm-push, tw, helm-docs, chart-testing, chartmuseum, cerbos, k9s, cilium-cli, helm-mapkubeapis, k8sgpt, kubescape, zot, cert-manager-cmctl, linkerd2, kargo, trivy, flux, pluto, eksctl, headlamp, rancher-fleet, istio,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: kots, nova, flux-helm-controller, envoy-gateway, helm-push, helm-docs, chart-testing, chartmuseum, cerbos, k9s, cilium-cli, helm-mapkubeapis, k8sgpt, kubescape, zot, cert-manager-cmctl, linkerd2, kargo, trivy, flux, pluto, eksctl, headlamp, rancher-fleet, istio,...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: kots, nova, flux-helm-controller, envoy-gateway, helm-push, helm-docs, chart-testing, chartmuseum, cerbos, k9s, cilium-cli, helm-mapkubeapis, k8sgpt, kubescape, zot, cert-manager-cmctl, linkerd2, kargo, trivy, flux, pluto, eksctl, headlamp, rancher-fleet, istio,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: kots, nova, flux-helm-controller, envoy-gateway, helm-push, tw, helm-docs, chart-testing, chartmuseum, cerbos, k9s, cilium-cli, helm-mapkubeapis, k8sgpt, kubescape, zot, cert-manager-cmctl, linkerd2, kargo, trivy, flux, pluto, eksctl, headlamp, rancher-fleet, istio,...

Malicious code in dvrt-flux-react-router (npm)

The package dvrt-flux-react-router was found to contain malicious code...

MAL-2025-19005 Malicious code in dvrt-flux-react-router (npm)

The package dvrt-flux-react-router was found to contain malicious code...

CVE-2025-47907 vulnerabilities

Vulnerabilities for packages: kots, ip-masq-agent, rancher-helm, otel-cli, docker, kubernetes-dashboard, xeol, pguser, nri-postgresql, cluster-api-aws-controller, spegel, yunikorn-web, nerdctl, aws-load-balancer-controller, sbom-scorecard, gitea, kube-logging-operator, nuclei, gomplate,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: cerbos-fips, crossplane-provider-azure-storage, kubelet-csr-approver, apache-exporter, ghaudit, trust-manager, stakater-reloader-fips, fq, consul-k8s, loki-fips, tekton-pipelines-fips, splunk-otel-collector, undock, prometheus-pushgateway-fips, wolfictl, mongo-tools,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: kots, flux-helm-controller, envoy-gateway, helm-push, tw, helm-docs, chart-testing, rancher-helm, chartmuseum, cerbos, k9s, cilium-cli, k8sgpt, zot, cert-manager-cmctl, linkerd2, kargo, trivy, pluto, eksctl, rancher-fleet, istio, k8ssandra-client,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: kots, flux-helm-controller, envoy-gateway, helm-push, tw, helm-docs, chart-testing, rancher-helm, chartmuseum, cerbos, k9s, cilium-cli, k8sgpt, zot, cert-manager-cmctl, linkerd2, kargo, trivy, pluto, eksctl, rancher-fleet, istio, k8ssandra-client,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: k8ssandra-client-fips, cerbos-fips, cluster-api-helm-controller, flux-fips, rancher-fleet, rancher-fleet-fips, envoy-gateway-fips, istio, cert-manager-cmctl-fips, k8ssandra-client, chartmuseum-fips, harbor, linkerd2-fips, flux-source-controller, consul-k8s, trivy-fip...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: k8ssandra-client-fips, cerbos-fips, cluster-api-helm-controller, flux-fips, rancher-fleet, rancher-fleet-fips, envoy-gateway-fips, istio, cert-manager-cmctl-fips, k8ssandra-client, chartmuseum-fips, harbor, linkerd2-fips, flux-source-controller, consul-k8s, trivy-fip...

CVE-2022-39272

Flux is an open and extensible continuous delivery solution for Kubernetes. Versions prior to 0.35.0 are subject to a Denial of Service. Users that have permissions to change Flux’s objects, either through a Flux source or directly within a cluster, can provide invalid data to fields .spec.interv...

CVE-2024-43806 affecting package flux for versions less than 0.194.5-2

CVE-2024-43806 affecting package flux for versions less than 0.194.5-2. A patched version of the package is available...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: kots, flux-helm-controller, helm-push, tw, helm-docs, chart-testing, rancher-helm, chartmuseum, k9s, cilium-cli, kubescape, zot, cert-manager-cmctl, trivy, flux, pluto, eksctl, k8ssandra-client, flux-source-controller, zarf, cluster-api-helm-controller, helm-operator...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: kots, flux-helm-controller, helm-push, tw, helm-docs, chart-testing, rancher-helm, chartmuseum, k9s, cilium-cli, kubescape, zot, cert-manager-cmctl, trivy, flux, pluto, eksctl, k8ssandra-client, flux-source-controller, zarf, cluster-api-helm-controller, helm-operator...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: kots, flux-helm-controller, helm-push, tw, helm-docs, chart-testing, rancher-helm, chartmuseum, k9s, cilium-cli, kubescape, zot, cert-manager-cmctl, trivy, flux, pluto, eksctl, k8ssandra-client, flux-source-controller, zarf, cluster-api-helm-controller, helm-operator...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: kots, flux-helm-controller, helm-push, tw, helm-docs, chart-testing, rancher-helm, chartmuseum, k9s, cilium-cli, kubescape, zot, cert-manager-cmctl, trivy, flux, pluto, eksctl, k8ssandra-client, flux-source-controller, zarf, cluster-api-helm-controller, helm-operator...