105 matches found
CVE-2025-32387 vulnerabilities
Vulnerabilities for packages: helm-docs, rancher-helm, cert-manager-cmctl, flux, tw, cluster-api-helm-controller, flux-source-controller, trivy, flux-helm-controller, cilium-cli, k9s, pluto, helm-operator, k8ssandra-client, zarf, zot, helm-push, kots, chart-testing, kubescape, eksctl, chartmuseum...
GHSA-4HFP-H4CW-HJ8P vulnerabilities
Vulnerabilities for packages: helm-docs, rancher-helm, cert-manager-cmctl, flux, tw, cluster-api-helm-controller, flux-source-controller, trivy, flux-helm-controller, cilium-cli, k9s, pluto, helm-operator, k8ssandra-client, zarf, zot, helm-push, kots, chart-testing, kubescape, eksctl, chartmuseum...
CVE-2025-32386 vulnerabilities
Vulnerabilities for packages: helm-docs, rancher-helm, cert-manager-cmctl, flux, tw, cluster-api-helm-controller, flux-source-controller, trivy, flux-helm-controller, cilium-cli, k9s, pluto, helm-operator, k8ssandra-client, zarf, zot, helm-push, kots, chart-testing, kubescape, eksctl, chartmuseum...
GHSA-5XQW-8HWV-WG92 vulnerabilities
Vulnerabilities for packages: helm-docs, rancher-helm, cert-manager-cmctl, flux, tw, cluster-api-helm-controller, flux-source-controller, trivy, flux-helm-controller, cilium-cli, k9s, pluto, helm-operator, k8ssandra-client, zarf, zot, helm-push, kots, chart-testing, kubescape, eksctl, chartmuseum...
GHSA-265R-HFXG-FHMG vulnerabilities
Vulnerabilities for packages: fuse-overlayfs-snapshotter, skaffold, neuvector-scanner, cert-manager-cmctl, newrelic-infrastructure-agent, rancher-fleet, k3s, docker-cli-buildx, cluster-api-helm-controller, docker-compose, flux-source-controller, trivy, flux-helm-controller, helm, k8sgpt, kaniko,...
CVE-2024-40635 vulnerabilities
Vulnerabilities for packages: kubevela, syft-fips, buildkitd, docker, docker-compose, helm, opa-fips-envoy, helm-push, cluster-api-helm-controller, eksctl, flux-helm-controller-fips, kargo, chartmuseum, zarf, cert-manager-cmctl, cluster-api-helm-controller-fips, opa-envoy, grype-db, skaffold,...
GHSA-265R-HFXG-FHMG vulnerabilities
Vulnerabilities for packages: kubevela, syft-fips, buildkitd, docker, docker-compose, helm, opa-fips-envoy, helm-push, cluster-api-helm-controller, eksctl, flux-helm-controller-fips, kargo, chartmuseum, zarf, cert-manager-cmctl, cluster-api-helm-controller-fips, opa-envoy, grype-db, skaffold,...
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: nuclei, spire-server, secrets-store-csi-driver-provider-azure, guac, restic, flux-image-reflector-controller, flux, airflow, prometheus-operator, step-ca, harbor-registry, goreleaser, policy-controller, boring-registry, hugo, hugo-extended, sqlpad, tekton-chains,...
GO-2024-2859 source-controller leaks Azure Storage SAS token into logs in github.com/fluxcd/source-controller
source-controller leaks Azure Storage SAS token into logs in github.com/fluxcd/source-controller...
CVE-2024-31216 source-controller leaks theAzure Storage SAS token into logs on connection errors
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit. Prior to versi...
CVE-2024-31216 source-controller leaks theAzure Storage SAS token into logs on connection errors
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit. Prior to versi...
CVE-2024-31216 source-controller leaks theAzure Storage SAS token into logs on connection errors
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit. Prior to versi...
Source controller 安全漏洞
Source controller is a component of the Flux project. A security vulnerability exists in source-controller versions prior to 1.2.5. An attacker can exploit this vulnerability to gain access to Azure Blob Storage...
CVE-2024-31216: Insertion of Sensitive Information into Log File
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit. Prior to versi...
GHSA-R53H-JV2G-VPX6 vulnerabilities
Vulnerabilities for packages: helm-operator, cilium-cli, flux-source-controller, k8sgpt, kubevela, flux-helm-controller, up, helm-push, eksctl, zarf, k9s, kubescape, chartmuseum, zot, trivy, kots...
GHSA-V53G-5GJP-272R vulnerabilities
Vulnerabilities for packages: cilium-cli, helm-push, zarf, kots, flux-source-controller, k9s, kubevela, flux-helm-controller, kubescape, trivy, eksctl, helm-operator, zot, chartmuseum, k8sgpt, up...
CVE-2024-25620 vulnerabilities
Vulnerabilities for packages: helm-operator, cilium-cli, flux-source-controller, k8sgpt, kubevela, flux-helm-controller, up, helm-push, eksctl, zarf, k9s, kubescape, chartmuseum, zot, trivy, kots...
GHSA-VFP6-JRW2-99G9 vulnerabilities
Vulnerabilities for packages: flux-source-controller, spire-server, apko, kubescape, aactl, melange, tkn, skaffold, spire-server-fips, slsa-verifier, policy-controller, tekton-chains, falcoctl-fips, ko, cosign...
CVE-2023-46737 vulnerabilities
Vulnerabilities for packages: flux-source-controller, spire-server, apko, kubescape, aactl, melange, tkn, skaffold, spire-server-fips, slsa-verifier, policy-controller, tekton-chains, falcoctl-fips, ko, cosign...