CVE-2025-32387

🗓️ 09 Apr 2025 22:28:33Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 273 Views

Helm's JSON Schema vulnerability can cause stack overflow due to deep reference nesting. Fixed in v3.17.3.

Reporter	Title	Published	Views	Family All 78
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion	11 Sep 202518:18	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of helm, IBM Kubecost Self Hosted is affected by stack overflow and memory exhaustion	6 Nov 202514:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to helm ( CVE-2025-32386, CVE-2025-32387 )	30 Sep 202513:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	20 May 202514:32	–	ibm
AlpineLinux	CVE-2025-32387	9 Apr 202523:15	–	alpinelinux
Tenable Nessus	Azure Linux 3.0 Security Update: helm (CVE-2025-32387)	11 Jul 202500:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: cert-manager / helm (CVE-2025-32387)	11 Jul 202500:00	–	nessus
Tenable Nessus	SUSE SLES15 / openSUSE 15 Security Update : helm-mirror (SUSE-SU-2025:01830-1)	7 Jun 202500:00	–	nessus
Tenable Nessus	SUSE SLES15 Security Update : helm-mirror (SUSE-SU-2025:01830-2)	9 Jul 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2025-32387	2 Sep 202500:00	–	nessus

NVD

Vulners

Node

helm helmRange<3.17.3

[
  {
    "vendor": "helm",
    "product": "helm",
    "versions": [
      {
        "version": "< 3.17.3",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/helm/helm/security/advisories/GHSA-5xqw-8hwv-wg92
github	www.github.com/helm/helm/commit/d8ca55fc669645c10c0681d49723f4bb8c0b1ce7

03 Sep 2025 17:03Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.5

EPSS0.00012

SSVC