Skip to content
OpenAdvisories

Package · Go

helm.sh/helm

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-18658

    Helm Unsafe Link Following

    In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service (DoS) via a spec…

    helm.sh/helm Go
  • Critical 9.8
    CVE-2019-1010275

    Helm Improper Certificate Validation

    helm Before 2.7.2 is affected by: CWE-295: Improper Certificate Validation. The impact is: Unauthorized clients could connect to the server because self-signed client certs were aloowed. The component is: helm (many files updated, see https://github.com/helm/…

    helm helm helm.sh/helm helm Ubuntu Go