Skip to content
OpenAdvisories

Package · Go

helm.sh/helm/v3

22 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.5
    CVE-2025-53547 Public exploit

    Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution

    Helm is a package manager for Charts for Kubernetes. Prior to 3.18.4, a specially crafted Chart.yaml file along with a specially linked Chart.lock file can lead to local code execution when dependencies are updated. Fields in a Chart.yaml file, that are carri…

    helm helm zot kots Azure Linux Alpine Wolfi Go
  • High 7.5
    CVE-2024-26147

    Helm's Missing YAML Content Leads To Panic

    Helm is a package manager for Charts for Kubernetes. Versions prior to 3.14.2 contain an uninitialized variable vulnerability when Helm parses index and plugin yaml files missing expected content. When either an `index.yaml` file or a plugins `plugin.yaml` fi…

    helm helm zot kubescape Ubuntu Azure Linux Wolfi Go
  • High 8.5
    CVE-2020-11013

    lookup Function Information Discolosure in Helm

    Their is an information disclosure vulnerability in Helm from version 3.1.0 and before version 3.2.0. `lookup` is a Helm template function introduced in Helm v3. It is able to lookup resources in the cluster to check for the existence of specific resources an…

    helm helm helm.sh/helm/v3 helm Ubuntu Go
  • High 7.5
    CVE-2020-7919

    Helm uses crypto package vulnerable to panic from malformed X.509 certificate

    Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows attacks on clients (resulting in a panic) via a malformed X.509 certificate.

    go stdlib k3d golang-1.13 Ubuntu Alpine Wolfi Go