105 matches found
CVE-2025-32387 vulnerabilities
Vulnerabilities for packages: chart-testing, cert-manager-cmctl, cluster-api-helm-controller, chartmuseum, rancher-helm, helm-push, flux-helm-controller, helm-docs, kubescape, flux-source-controller, trivy, helm-operator, zot, k9s, k8ssandra-client, zarf, cilium-cli, tw, kots, eksctl, pluto, flux...
GHSA-4HFP-H4CW-HJ8P vulnerabilities
Vulnerabilities for packages: chart-testing, cert-manager-cmctl, cluster-api-helm-controller, chartmuseum, rancher-helm, helm-push, flux-helm-controller, helm-docs, kubescape, flux-source-controller, trivy, helm-operator, zot, k9s, k8ssandra-client, zarf, cilium-cli, tw, kots, eksctl, pluto, flux...
CVE-2025-32386 vulnerabilities
Vulnerabilities for packages: chart-testing, cert-manager-cmctl, cluster-api-helm-controller, chartmuseum, rancher-helm, helm-push, flux-helm-controller, helm-docs, kubescape, flux-source-controller, trivy, helm-operator, zot, k9s, k8ssandra-client, zarf, cilium-cli, tw, kots, eksctl, pluto, flux...
GHSA-5XQW-8HWV-WG92 vulnerabilities
Vulnerabilities for packages: chart-testing, cert-manager-cmctl, cluster-api-helm-controller, chartmuseum, rancher-helm, helm-push, flux-helm-controller, helm-docs, kubescape, flux-source-controller, trivy, helm-operator, zot, k9s, k8ssandra-client, zarf, cilium-cli, tw, kots, eksctl, pluto, flux...
GHSA-265R-HFXG-FHMG vulnerabilities
Vulnerabilities for packages: neuvector-scanner, cert-manager-cmctl, dagger, cluster-api-helm-controller, newrelic-infrastructure-agent, xeol, helm, syft, nerdctl, kaniko, envoy-gateway, docker, chartmuseum, k8sgpt, helm-push, flux-helm-controller, kubevela, linkerd2, rancher-fleet, buildkitd,...
CVE-2024-40635 vulnerabilities
Vulnerabilities for packages: zarf, cilium-cli, syft-fips, cluster-api-helm-controller-fips, docker-cli-buildx, kaniko-fips, chartmuseum, flux-helm-controller, opa-fips-envoy, envoy-gateway, consul-k8s-fips, opa, beats-fips, helm-push, kargo, dagger, rancher-fleet, opa-envoy, chainctl,...
GHSA-265R-HFXG-FHMG vulnerabilities
Vulnerabilities for packages: zarf, cilium-cli, syft-fips, cluster-api-helm-controller-fips, docker-cli-buildx, kaniko-fips, chartmuseum, flux-helm-controller, opa-fips-envoy, envoy-gateway, consul-k8s-fips, opa, beats-fips, helm-push, kargo, dagger, rancher-fleet, opa-envoy, chainctl,...
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: grafana-mimir, rekor, falcoctl, flyte, grafana-agent-operator, sigstore-scaffolding, py3-cassandra-medusa, trino, sops, cortex, step, hugo-extended, boring-registry, k8sgpt, thanos, nuclei, step-ca, velero, rook, guac, rclone, sqlpad, druid, py3-azure-identity,...
GO-2024-2859 source-controller leaks Azure Storage SAS token into logs in github.com/fluxcd/source-controller
source-controller leaks Azure Storage SAS token into logs in github.com/fluxcd/source-controller...
CVE-2024-31216 source-controller leaks theAzure Storage SAS token into logs on connection errors
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit. Prior to versi...
CVE-2024-31216 source-controller leaks theAzure Storage SAS token into logs on connection errors
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit. Prior to versi...
CVE-2024-31216 source-controller leaks theAzure Storage SAS token into logs on connection errors
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit. Prior to versi...
CVE-2024-31216: Insertion of Sensitive Information into Log File
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit. Prior to versi...
Source controller 安全漏洞
Source controller is a component of the Flux project. A security vulnerability exists in source-controller versions prior to 1.2.5. An attacker can exploit this vulnerability to gain access to Azure Blob Storage...
GHSA-R53H-JV2G-VPX6 vulnerabilities
Vulnerabilities for packages: kubescape, zarf, cilium-cli, zot, k8sgpt, eksctl, chartmuseum, helm-push, flux-helm-controller, kubevela, up, k9s, helm-operator, trivy, flux-source-controller, kots...
GHSA-V53G-5GJP-272R vulnerabilities
Vulnerabilities for packages: chartmuseum, k8sgpt, helm-push, flux-helm-controller, kubevela, zarf, cilium-cli, kubescape, helm-operator, kots, trivy, up, eksctl, zot, flux-source-controller, k9s...
CVE-2024-25620 vulnerabilities
Vulnerabilities for packages: kubescape, zarf, cilium-cli, zot, k8sgpt, eksctl, chartmuseum, helm-push, flux-helm-controller, kubevela, up, k9s, helm-operator, trivy, flux-source-controller, kots...
GHSA-VFP6-JRW2-99G9 vulnerabilities
Vulnerabilities for packages: slsa-verifier, kubescape, tekton-chains, spire-server, spire-server-fips, apko, policy-controller, tkn, cosign, falcoctl-fips, aactl, skaffold, melange, flux-source-controller, ko...
CVE-2023-46737 vulnerabilities
Vulnerabilities for packages: slsa-verifier, kubescape, tekton-chains, spire-server, spire-server-fips, apko, policy-controller, tkn, cosign, falcoctl-fips, aactl, skaffold, melange, flux-source-controller, ko...