Go/github.com/fluxcd/source-controller CVE-2026-47680: medium 5.3, EPSS 0.46%

Source controller: Improper path handling allows traversal

Action: Upgrade github.com/fluxcd/source-controller to 1.8.5 or later.

go get github.com/fluxcd/source-controller@v1.8.5

Affected

Fixed versions

Sources

• osv: GHSA-jjrm-hr5f-673x
• nvd: CVE-2026-47680
• https://github.com/fluxcd/source-controller/security/advisories/GHSA-jjrm-hr5f-673x
• https://github.com/fluxcd/source-controller/pull/2054
• https://github.com/fluxcd/source-controller/commit/759bd6c451e7cc4327b38f42c8b671980165cb0e
• https://github.com/fluxcd/source-controller

CVE-2026-47680 · published 2026-06-05T16:32:51Z · modified 2026-06-25T23:11:27.075607265Z · JSON