MEDIUM5.0Go
GHSA-f4p5-x4vc-mh4v· BIT-flux-2022-39272, BIT-kustomize-2022-39272Improper use of metav1.Duration allows for Denial of Service
Modified: 9/10/2026
package
Go/github.com/fluxcd/notification-controller
pkg:go/github.com/fluxcd/notification-controller
LOW3.1Go
GHSA-h9cx-xjg6-5v2w· CVE-2026-40109, GO-2026-5419Flux notification-controller GCR Receiver missing email validation allows unauthorized reconciliation triggering
Modified: 6/25/2026
—Go
GO-2026-5419· CVE-2026-40109, GHSA-h9cx-xjg6-5v2wFlux notification-controller GCR Receiver missing email validation allows unauthorized reconciliation triggering in github.com/fluxcd/notification-controller
Modified: 6/25/2026