MEDIUM5.0Go
GHSA-f4p5-x4vc-mh4v· BIT-flux-2022-39272, BIT-kustomize-2022-39272Improper use of metav1.Duration allows for Denial of Service
Modified: 9/10/2026
package
Go/github.com/fluxcd/source-controller
pkg:go/github.com/fluxcd/source-controller
MEDIUMGo
GHSA-jjrm-hr5f-673x· CVE-2026-47680, GO-2026-5472Source controller: Improper path handling allows traversal
Modified: 6/25/2026
MEDIUM5.1Go
GHSA-v554-xwgw-hc3w· CVE-2024-31216, GO-2024-2859source-controller leaks Azure Storage SAS token into logs
Modified: 9/10/2026
—Go
GO-2024-2859· CVE-2024-31216, GHSA-v554-xwgw-hc3wsource-controller leaks Azure Storage SAS token into logs in github.com/fluxcd/source-controller
Modified: 2/4/2026
—Go
GO-2026-5472· CVE-2026-47680, GHSA-jjrm-hr5f-673xSource controller: Improper path handling allows traversal in github.com/fluxcd/source-controller
Modified: 6/25/2026