Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/fluxcd/notification-controller

2 known vulnerabilities (1 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 medium, 1 low
Registry
pkg.go.dev

Advisories 2

  • Flux notification-controller GCR Receiver missing email validation allows unauthorized reconciliation triggering

    Affected: fixed in 1.8.3.

  • CVE-2022-39272Medium 5.0

    Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration

    Affected: from 0.0.1-alpha-1, fixed in 0.27.0.