Go/github.com/fluxcd/source-controller CVE-2024-31216: medium 5.1, EPSS 0.21%

source-controller leaks Azure Storage SAS token into logs

Action: Upgrade github.com/fluxcd/source-controller to 1.2.5 or later.

go get github.com/fluxcd/source-controller@v1.2.5

Affected

Fixed versions

Sources

• osv: GHSA-v554-xwgw-hc3w
• https://github.com/fluxcd/source-controller/security/advisories/GHSA-v554-xwgw-hc3w
• https://nvd.nist.gov/vuln/detail/CVE-2024-31216
• https://github.com/fluxcd/source-controller/pull/1430
• https://github.com/fluxcd/source-controller/commit/915d1a072a4f37dd460ba33079dc094aa6e72fa9
• https://github.com/fluxcd/source-controller

CVE-2024-31216 · published 2024-05-15T17:09:24Z · modified 2026-09-10T03:50:14.284296687Z · JSON