Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY

All Action needed Check if affected Plan ahead

KIND

Category

All AI & ML CI/CD & App Delivery Kubernetes Core Networking & Messaging Observability Orchestration & Management Provisioning & Runtime Security Storage & Data

Project: FluxClear ×

Fluxv2.8.8CI/CD & App DeliveryMay 20, 2026

ACTION 1OTHER 11View full analysis

Flux v2.8.8 is a maintenance release with defect corrections, expanded compatibility, and dependency updates. It also includes two disclosed security fixes in go-git.

Action needed (1)

securitymediumThe go-git security fixes for CVE-2026-45571 and CVE-2026-45570
Flux v2.8.8 includes security fixes in go-git associated with CVE-2026-45571, CVE-2026-45570, GHSA-crhj-59gh-8x96, and GHSA-m7cr-m3pv-hgrp.

Source ↗

Fluxv2.8.7CI/CD & App DeliveryMay 12, 2026

ACTION 1OTHER 1View full analysis

Flux v2.8.7 includes a security update to the go-git dependency alongside toolkit component updates. The go-git update addresses CVE-2026-45022 and GHSA-389r-gv7p-r3rp.

Action needed (1)

securityhighThe go-git dependency update to v5.19.0
The go-git dependency is updated to v5.19.0, which fixes CVE-2026-45022 and addresses GHSA-389r-gv7p-r3rp. This update ships in Flux v2.8.7.

Source ↗

Fluxv2.8.2CI/CD & App DeliveryMar 12, 2026

ACTION 1OTHER 7View full analysis

Flux v2.8.2 includes correctness fixes and dependency updates. It also fixes a disclosed TLS-handshake denial-of-service issue in the controller builds.

Action needed (1)

securitymediumCVE-2026-27138 TLS-handshake DoS fix
The TLS-handshake denial-of-service issue identified as CVE-2026-27138 is fixed by building all controllers with Go 1.26.1.

Source ↗

Browse by month