- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 3 medium
- Registry
- pkg.go.dev
Advisories 3
- CVE-2026-47680Medium 5.3
Source controller: Improper path handling allows traversal
Affected: from 0.0.17, fixed in 1.8.5.
- CVE-2024-31216Medium 5.1
source-controller leaks theAzure Storage SAS token into logs on connection errors
Affected: fixed in 1.2.5.
- CVE-2022-39272Medium 5.0
Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration
Affected: from 0.0.1-alpha-1, fixed in 0.30.0.