Skip to content
OpenAdvisories

Package · Go

helm.sh/helm

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-55198

    Helm May Panic Due To Incorrect YAML Content

    Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, when parsing Chart.yaml and index.yaml files, an improper validation of type error can lead to a panic. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring Y…

    helm helm helm.sh/helm/v3 helm.sh/helm Go
  • Medium 6.5
    CVE-2025-55199

    Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion

    Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory (OOM) termination. This issue has been resolved i…

    helm helm helm.sh/helm/v3 helm.sh/helm Go
  • Medium 6.5
    CVE-2019-1000008

    Helm Path Traversal

    All versions of Helm between Helm >=2.0.0 and < 2.12.2 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The commands `helm fetch --untar` and `helm lint some.tgz` that can result when chart arc…

    helm.sh/helm Go