Priority MEDIUM 57
Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the Files.Lines template helper in pkg/engine/files.go that allows attackers to trigger an index out of range panic by including…
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00486 · Published 2026-07-17 · Partial fix CWE-129
Priority LOW 21
Helm is a package manager for Charts for Kubernetes.
CVSS 4.0MEDIUM 4.8· Local · No auth · User interaction · EPSS 0.00206 · Published 2026-04-09 · Partial fix · 4.1.4, 3.20.2 CWE-22
Priority LOW 38
Helm is a package manager for Charts for Kubernetes.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00221 · Published 2026-04-09 · Partial fix · 4.1.4 CWE-636
Priority LOW 36
Helm is a package manager for Charts for Kubernetes.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00205 · Published 2026-04-09 · Partial fix · 4.1.4 CWE-22
Priority LOW 29
Helm is a package manager for Charts for Kubernetes.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00354 · Published 2025-08-13 · Partial fix · 3.18.5 CWE-908
Priority LOW 29
Helm is a package manager for Charts for Kubernetes.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00354 · Published 2025-08-13 · Partial fix · 3.18.5 CWE-770
Priority MEDIUM 40
Helm is a package manager for Charts for Kubernetes.
CVSS 3.1HIGH 8.6· Local · No auth · User interaction · EPSS 0.00494 · Published 2025-07-08 · Partial fix · 3.18.4, 3.17.4 CWE-94
Priority LOW 29
Helm is a tool for managing Charts.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00466 · Published 2025-04-09 · Partial fix · 3.17.3 CWE-770
Priority LOW 29
Helm is a package manager for Charts for Kubernetes.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00501 · Published 2025-04-09 · Partial fix · 3.17.3 CWE-121
Priority MEDIUM 48
An issue was discovered in Cloud Native Computing Foundation (CNCF) Helm through 3.13.3.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.0068 · Published 2024-03-03 · Partial fix CWE-200
Priority MEDIUM 41
Helm is a package manager for Charts for Kubernetes.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00926 · Published 2024-02-21 · Partial fix · 3.14.2 CWE-457
Priority MEDIUM 62
Helm is a tool for managing Charts.
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00567 · Published 2024-02-14 · Partial fix · 3.14.1 CWE-22
Priority MEDIUM 53
Helm is a tool that streamlines installing and managing Kubernetes applications.`getHostByName` is a Helm template function introduced in Helm v3.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2023-02-08 · Partial fix · 3.11.1 CWE-200
Priority MEDIUM 41
Helm is a tool for managing Charts, pre-configured Kubernetes resources.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00888 · Published 2022-12-15 · Partial fix · v3.10.3, 3.10.3 CWE-476
Priority MEDIUM 41
Helm is a tool for managing Charts, pre-configured Kubernetes resources.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00888 · Published 2022-12-15 · Partial fix · v3.10.3, 3.10.3 CWE-476
Priority MEDIUM 40
Helm is a tool for managing Charts, pre-configured Kubernetes resources.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0081 · Published 2022-12-15 · Partial fix · v3.10.3, 3.10.3 CWE-400
Priority LOW 37
Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.01542 · Published 2022-09-07 · Fixed in 0.23.0, 0.32.0 CWE-400
Priority LOW 31
Helm is a tool for managing Charts.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01118 · Published 2022-09-01 · Partial fix · 3.9.4 CWE-400
Priority MEDIUM 40
Helm is a tool for managing Charts (packages of pre-configured Kubernetes resources).
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01434 · Published 2021-06-16 · Partial fix · 3.6.1 CWE-200
Priority LOW 32
Helm is open-source software which is essentially "The Kubernetes Package Manager".
CVSS 3.1MEDIUM 6.8· Network · Low privileges · User interaction · EPSS 0.01086 · Published 2021-02-05 · Fixed in 3.5.2 CWE-74
Priority LOW 25
In Helm before versions 2.16.11 and 3.3.2, a Helm plugin can contain duplicates of the same entry, with the last one always used.
CVSS 3.1MEDIUM 4.7· Network · High privileges · No interaction · EPSS 0.01517 · Published 2020-09-17 · Partial fix · 2.16.11, 3.3.2 CWE-694
Priority LOW 18
In Helm before versions 2.16.11 and 3.3.2 plugin names are not sanitized properly.
CVSS 3.1LOW 3.4· Network · No auth · User interaction · EPSS 0.00962 · Published 2020-09-17 · Partial fix · 2.16.11, 3.3.2 CWE-20
Priority LOW 15
In Helm before versions 2.16.11 and 3.3.2, a Helm repository can contain duplicates of the same chart, with the last one always used.
CVSS 3.1LOW 2.7· Network · High privileges · No interaction · EPSS 0.00883 · Published 2020-09-17 · Partial fix · 2.16.11, 3.3.2 CWE-694
Priority LOW 20
In Helm before versions 2.16.11 and 3.3.2 there is a bug in which the `alias` field on a `Chart.yaml` is not properly sanitized.
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.01029 · Published 2020-09-17 · Partial fix · 2.16.11, 3.3.2 CWE-20
Priority LOW 33
In Helm greater than or equal to 3.0.0 and less than 3.2.4, a path traversal attack is possible when installing Helm plugins from a tar archive over HTTP.
CVSS 3.1MEDIUM 6.8· Network · High privileges · User interaction · EPSS 0.01458 · Published 2020-06-16 · Fixed in 3.2.4 CWE-22
Load more
THREATIST.IORead the docs