Skip to content
OpenAdvisories

Product · The Helm Project

Helm

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2020-4053

    Path Traversal in Helm Plugin Archive

    In Helm greater than or equal to 3.0.0 and less than 3.2.4, a path traversal attack is possible when installing Helm plugins from a tar archive over HTTP. It is possible for a malicious plugin author to inject a relative path into a plugin archive, and copy a…

    The Helm Project Helm helm.sh/helm/v3 Go