Skip to content
OpenAdvisories

Package · Go

helm.sh/helm/v4

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2026-35206

    Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment

    Helm is a package manager for Charts for Kubernetes. In Helm versions <=3.20.1 and <=4.1.3, a specially crafted Chart will cause helm pull --untar [chart URL | repo/chartname] to write the Chart's contents to the immediate output directory (as defaulted to th…

    helm helm zot kubescape Wolfi Go