Flux | v2.8.2

Flux v2 8 2: patch with security fix CVE 2026 27138, fixes for helm, kustomize, source, image controllers, improves reliability, upgrade from v2 6

Flux v2.8.2 released on 12-03-2026


Flux v2.8.2 is out now. It is a patch release with multiple bug fixes and security/toolchain updates that improve reliability and the user experience for source, Helm and Kustomize flows.

Follow the Upgrade Procedure for Flux v2.7+ when moving from v2.6, and see the component changelogs and full changelog on the Flux GitHub for complete details.

What’s in this release

  • Fix enqueuing of new reconciliation requests for events on source objects when they are already reconciling the revision from the event (kustomize-controller, helm-controller)
  • Resolve Go template YAML separator ‘—‘ concatenation by updating to Helm 4.1.3 (helm-controller)
  • Fix potential DoS during TLS handshakes (CVE-2026-27138) by building controllers with Go 1.26.1

Upgrade notes

  • Follow the published Upgrade Procedure for Flux v2.7+ for a smooth upgrade from v2.6.
  • If you need to roll back, the prior release is v2.8.1; consult the full changelog for differences before reverting.

Let us know how the upgrade goes — share comments or issues on the Flux GitHub so maintainers and the community can see your experience.