AZL-64877 CVE-2025-53547 affecting package helm for versions less than 3.14.2-7

🗓️ 08 Jul 2025 22:15:27Reported by GoogleType

Helm pre-3.18.4 enables code execution via crafted Chart.yaml and symlinked Chart.lock; fixed in 3.18.4

Reporter	Title	Published	Views	Family All 154
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	7 Aug 202508:11	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to local code execution due to the Helm package manager (CVE-2025-53547)	20 Nov 202514:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	28 Oct 202505:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)	21 Oct 202514:44	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion	19 Dec 202520:44	–	ibm
GithubExploit	Exploit for CVE-2025-53547	9 Jul 202509:03	–	githubexploit
AlpineLinux	CVE-2025-53547	8 Jul 202521:39	–	alpinelinux
Information Security Automation	August Linux Patch Wednesday	4 Sep 202508:28	–	avleonov
CBLMariner	CVE-2025-53547 affecting package helm for versions less than 3.14.2-7	16 Jul 202515:08	–	cbl_mariner
Chainguard	CVE-2025-53547 vulnerabilities	9 Jul 202513:16	–	cgr