—
GO-2022-0448
Improper path handling in Kustomization files allows for denial of service in github.com/fluxcd/flux2
Quick fix
GO-2022-0448 — github.com/fluxcd/flux2: upgrade to the fixed version with the command below.
go get github.com/fluxcd/flux2@v0.29.0Details
Improper path handling in Kustomization files allows for denial of service in github.com/fluxcd/flux2
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/fluxcd/flux2
Introduced in:
0.19.0Fixed in: 0.29.0Fix
go get github.com/fluxcd/flux2@v0.29.0Go/github.com/fluxcd/kustomize-controller
Introduced in:
0.16.0Fixed in: 0.24.0Fix
go get github.com/fluxcd/kustomize-controller@v0.24.0