CVE-2025-3661: Improper Neutralization of Input During Web Page Generation

The SB Chart block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘className’ parameter in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: zarf, kubescape, trivy, chartmuseum, k8ssandra-client, helm-push, flux-source-controller, k9s, cilium-cli, helm-docs, flux, helm-operator, zot, cert-manager-cmctl, chart-testing, tw, kots, eksctl, pluto, rancher-helm, flux-helm-controller, cluster-api-helm-controller...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: zarf, kubescape, trivy, chartmuseum, k8ssandra-client, helm-push, flux-source-controller, k9s, cilium-cli, helm-docs, flux, helm-operator, zot, cert-manager-cmctl, chart-testing, tw, kots, eksctl, pluto, rancher-helm, flux-helm-controller, cluster-api-helm-controller...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: zarf, kubescape, trivy, chartmuseum, k8ssandra-client, helm-push, flux-source-controller, k9s, cilium-cli, helm-docs, flux, helm-operator, zot, cert-manager-cmctl, chart-testing, tw, kots, eksctl, pluto, rancher-helm, flux-helm-controller, cluster-api-helm-controller...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: zarf, kubescape, trivy, chartmuseum, k8ssandra-client, helm-push, flux-source-controller, k9s, cilium-cli, helm-docs, flux, helm-operator, zot, cert-manager-cmctl, chart-testing, tw, kots, eksctl, pluto, rancher-helm, flux-helm-controller, cluster-api-helm-controller...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: helm-docs, cilium-cli, k8ssandra-client-fips, k9s, eksctl, flux-helm-controller-fips, kuma, flux, cert-manager-cmctl, harbor-fips, flux-helm-controller, chartmuseum, cluster-api-helm-controller, k8ssandra-client, zarf, consul-k8s, tw, harbor, chartmuseum-fips,...

BIT-HELM-2025-32386 Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...

GO-2025-3601 Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination in helm.sh/helm

Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination in helm.sh/helm...

GHSA-5XQW-8HWV-WG92 Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow

A Helm contributor discovered that a specially crafted JSON Schema within a chart can lead to a stack overflow. Impact A JSON Schema file within a chart can be crafted with a deeply nested chain of references, leading to parser recursion that can exceed the stack size limit and trigger a stack...

GHSA-4HFP-H4CW-HJ8P Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination

A Helm contributor discovered that a specially crafted chart archive file can cause Helm to use all available memory and have an out of memory OOM termination. Impact A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800...

Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination

A Helm contributor discovered that a specially crafted chart archive file can cause Helm to use all available memory and have an out of memory OOM termination. Impact A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800...

CVE-2025-32386

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...

AZL-59838 CVE-2025-32386 affecting package helm for versions less than 3.15.2-3

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...

AZL-59991 CVE-2025-32386 affecting package cert-manager for versions less than 1.12.15-4

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...

CVE-2025-32386

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...

CVE-2025-32386

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...

UBUNTU-CVE-2025-32387

Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be crafted with a deeply nested chain of references, leading to parser recursion that can exceed the stack size limit and trigger a stack overflow. This issue has been resolved in Helm v3.17.3...

UBUNTU-CVE-2025-32386

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...

CVE-2025-32386 Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...

CVE-2025-32386 Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...