Read the docs

helm

Records30All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

helm records in CISA KEV

No helm vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Chartmuseum · all components

Priority LOW 31

Helm ChartMuseum version >=0.1.0 and < 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HTTP API to save charts that can result in a specially craft…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01272 Published 2019-02-04 No fix listed CWE-22
Open these records in search →