PatchTheCVEfluxcd vulnerabilities
Recent CVEs affecting fluxcd products. 4 tracked.
fluxcd has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2022-10-22. Highest priority: CVE-2021-41254 (score 60/100).
- CVE-2022-39272 MEDIUM 5.0 UPGRADE UPGRADE Flux is an open and extensible continuous delivery solution for Kubernetes
- CVE-2022-36049 HIGH 7.7 UPGRADE UPGRADE Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-control
- CVE-2022-36035 HIGH 7.7 UPGRADE Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration (like Git repositories),
- CVE-2021-41254 HIGH 8.8 UPGRADE kustomize-controller is a Kubernetes operator, specialized in running continuous delivery pipelines for infras
FAQ
How do I fix fluxcd vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is fluxcd being exploited right now?
None of the tracked fluxcd CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which fluxcd CVE should I patch first?
CVE-2021-41254 currently ranks highest (60/100): kustomize-controller is a Kubernetes operator, specialized in running continuous delivery pipelines for infras.