fluxcd
Security Risk Profile
51
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 12, 2021 to present
7
Total CVEs
6
Critical+High
0
Exploited
5
Unpatched
Threat Assessment
Avg CVSS
8.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
5
Critical/High
Risk Level
51/100
medium
Severity Distribution
Critical
3High
3Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
3
2
Input Validation
1
3
Code Injection
1
4
OS Command Injection
1
Most Affected Products
1. fluxcd Kustomize-controller16
2. fluxcd Helm-controller9
3. fluxcd Source-controller9
4. fluxcd Flux26
5. fluxcd Notification-controller4
Recent Vulnerabilities
See more →CVE-2022-39272
CVSS 5.0medium
Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration
10/19/2022
CVE-2022-36049
CVSS 7.7high
Flux2 Helm Controller denial of service
9/7/2022🔧 No Patch
CVE-2022-36035
CVSS 7.8high
Flux CLI Workload Injection
8/31/2022🔧 No Patch
CVE-2022-24878
CVSS 7.7high
Improper path handling in Kustomization files allows for denial of service
5/6/2022🔧 No Patch
CVE-2022-24877
CVSS 9.9critical
Improper path handling in kustomization files allows path traversal
5/6/2022🔧 No Patch
CVE-2022-24817
CVSS 9.9critical
Improper kubeconfig validation allows arbitrary code execution
5/6/2022
CVE-2021-41254
CVSS 9.0critical
Privilege escalation to cluster admin on multi-tenant environments
11/12/2021🔧 No Patch
Monitor fluxcd in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.