flux-source-controller vulnerabilities

Known vulnerabilities in the flux-source-controller package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L GHSA-45v3-38pc-874v	<1.4.1-r7
L Improper Check for Certificate Revocation	<1.4.1-r7
L GHSA-r9px-m959-cxf4	<1.4.1-r6
L Arbitrary Argument Injection	<1.4.1-r6
L GHSA-v725-9546-7q7m	<1.4.1-r6
L Resource Exhaustion	<1.4.1-r6
L GHSA-w32m-9786-jp63	<1.4.1-r5
L CVE-2024-45338	<1.4.1-r5
L CVE-2024-45337	<1.4.1-r3
L GHSA-v778-237x-gjrc	<1.4.1-r3
L Improper Handling of Exceptional Conditions	<1.4.1-r2
L GHSA-29wx-vh33-7x7r	<1.4.1-r2
L GHSA-j7vj-rw65-4v26	<1.3.0-r8
L GHSA-8xfx-rj4p-23jm	<1.3.0-r8
L CVE-2024-34158	<1.3.0-r8
L GHSA-crqm-pwhx-j97f	<1.3.0-r8
L CVE-2024-34156	<1.3.0-r8
L CVE-2024-34155	<1.3.0-r8
L CVE-2024-41110	<1.3.0-r6
L GHSA-v23v-6jw2-98fq	<1.3.0-r6
L GHSA-hw49-2p59-3mhj	<1.3.0-r5
L CVE-2024-24791	<1.3.0-r5
L GHSA-v6v8-xj6m-xwqh	<1.3.0-r4
M Information Exposure Through Log Files	<1.3.0-r4
M Race Condition	<1.3.0-r3
L GHSA-m5vv-6r4h-3vj9	<1.3.0-r3
M CVE-2024-24789	<1.3.0-r2
C CVE-2024-24790	<1.3.0-r2
L GHSA-236w-p7wf-5ph8	<1.3.0-r2
L GHSA-49gw-vxvf-fc2g	<1.3.0-r2
L CVE-2024-24788	<1.3.0-r1
L CVE-2024-24787	<1.3.0-r1
L GHSA-2jwv-jmq4-4j3r	<1.3.0-r1
L GHSA-5fq7-4mxc-535h	<1.3.0-r1
L GHSA-4v7x-pqxf-cx7m	<1.2.5-r2
L CVE-2023-45288	<1.2.5-r2
L GHSA-95pr-fxf5-86gv	<1.2.5-r1
H Allocation of Resources Without Limits or Throttling	<1.2.5-r1
L GHSA-88jx-383q-w4qc	<1.2.5-r1
M Allocation of Resources Without Limits or Throttling	<1.2.5-r1
L CVE-2024-24786	<1.2.4-r5
L GHSA-8r3f-844c-mc37	<1.2.4-r5
L CVE-2024-28180	<1.2.4-r4
L GHSA-c5q2-7r4c-mv6g	<1.2.4-r4
L GHSA-r53h-jv2g-vpx6	<1.2.4-r2
H Use of Uninitialized Resource	<1.2.4-r2
M Directory Traversal	<1.2.4-r1
L GHSA-v53g-5gjp-272r	<1.2.4-r1
L GHSA-9763-4f94-gfch	<1.2.3-r3
L GHSA-7ww5-4wqc-m92c	<1.2.3-r2
L GHSA-45x7-px36-x8w8	<1.2.3-r1
M Improper Validation of Integrity Check Value	<1.2.3-r1
L GHSA-2wrh-6pvc-2jm9	<1.1.2-r1
L GHSA-4374-p667-p6c8	<1.1.2-r1
L GHSA-m425-mq94-257g	<1.1.2-r2
L GHSA-qppj-fm5r-hxr3	<1.1.2-r2
L GHSA-2c7c-3mj9-8fqh	<1.1.2-r3
H Allocation of Resources Without Limits or Throttling	<1.1.2-r1
H CVE-2023-44487	<1.1.2-r2
M Cross-site Scripting (XSS)	<1.1.2-r1

Vulnerability

Vulnerable Version

GHSA-45v3-38pc-874v

<1.4.1-r7

Improper Check for Certificate Revocation

<1.4.1-r7

GHSA-r9px-m959-cxf4

<1.4.1-r6

Arbitrary Argument Injection

<1.4.1-r6

GHSA-v725-9546-7q7m

<1.4.1-r6