HIGH7.7Go
GHSA-7pwf-jg34-hxwp· BIT-flux-2022-24878, BIT-kustomize-2022-24878Improper path handling in Kustomization files allows for denial of service
Modified: 12/2/2025
package
Go/github.com/fluxcd/flux2
pkg:go/github.com/fluxcd/flux2
MEDIUM5.0Go
GHSA-f4p5-x4vc-mh4v· BIT-flux-2022-39272, BIT-kustomize-2022-39272Improper use of metav1.Duration allows for Denial of Service
Modified: 9/10/2026
CRITICAL9.9Go
GHSA-j77r-2fxf-5jrw· BIT-flux-2022-24877, BIT-kustomize-2022-24877Improper path handling in kustomization files allows path traversal
Modified: 9/10/2026
HIGH7.7Go
GHSA-p2g7-xwvr-rrw3· BIT-flux-2022-36049, BIT-helm-2022-36049Helm Controller denial of service
Modified: 2/4/2026
CRITICAL9.9Go
GHSA-vvmq-fwmg-2gjc· BIT-flux-2022-24817, BIT-kustomize-2022-24817Improper kubeconfig validation allows arbitrary code execution
Modified: 12/2/2025
HIGH7.7Go
GHSA-xwf3-6rgv-939r· BIT-flux-2022-36035, CVE-2022-36035Flux CLI Workload Injection
Modified: 12/2/2025
—Go
GO-2022-0447· BIT-flux-2022-24877, BIT-kustomize-2022-24877Improper path handling in kustomization files allows path traversal in github.com/fluxcd/flux2
Modified: 2/4/2026
—Go
GO-2022-0448· BIT-flux-2022-24878, BIT-kustomize-2022-24878Improper path handling in Kustomization files allows for denial of service in github.com/fluxcd/flux2
Modified: 3/3/2026
—Go
GO-2022-0960· BIT-flux-2022-36035, CVE-2022-36035Flux CLI Workload Injection in github.com/fluxcd/flux2
Modified: 3/3/2026