Skip to content
OpenAdvisories

Package · Alpine

helm

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.5
    CVE-2025-53547 Public exploit

    Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution

    Helm is a package manager for Charts for Kubernetes. Prior to 3.18.4, a specially crafted Chart.yaml file along with a specially linked Chart.lock file can lead to local code execution when dependencies are updated. Fields in a Chart.yaml file, that are carri…

    helm helm helm.sh/helm/v3 helm Alpine Go
  • Medium 6.8
    CVE-2021-32690

    Repository credentials passed to alternate domain

    Helm is a tool for managing Charts (packages of pre-configured Kubernetes resources). In versions of helm prior to 3.6.1, a vulnerability exists where the username and password credentials associated with a Helm repository could be passed on to another domain…

    helm helm helm.sh/helm/v3 helm Alpine Go
  • Medium 5.9
    CVE-2021-21303

    Injection attack in Helm

    Helm is open-source software which is essentially "The Kubernetes Package Manager". Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. In Helm from version 3.0 and before version 3.5.2, there a few cases where data…

    helm helm helm.sh/helm/v3 helm Ubuntu Alpine Go