Executive brief
Helm Controller denial of service
Affected products
- Go github.com/fluxcd/helm-controller
- Go github.com/fluxcd/flux2
Junglewise Threat Intelligence
CVE-2022-36049: Helm Controller denial of service
CVE-2022-36049 · Severity: low · CVSS 3.1 · Published 2022-09-16
Technologies: github.com/fluxcd/helm-controller (Go), github.com/fluxcd/flux2 (Go). Vendors: Go.
Related threats
- GO-2022-0960 - Flux CLI Workload Injection in github.com/fluxcd/flux2
- GO-2022-0448 - Improper path handling in Kustomization files allows for denial of service in github.com/fluxcd/flux2
- GO-2022-0447 - Improper path handling in kustomization files allows path traversal in github.com/fluxcd/flux2
- GO-2022-1071 - Denial of service in flux controllers in github.com/fluxcd modules
- Improper kubeconfig validation allows arbitrary code execution