CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: kots, trivy-operator, envoy-gateway, eksctl, zarf, helm-docs, kargo, trivy, helm-operator, chartmuseum, cerbos, pluto, kubescape, linkerd2, cilium-cli, helm-mapkubeapis, zot, helm-push, istio, cluster-api-helm-controller, k8sgpt, k8ssandra-client,...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: kots, trivy-operator, envoy-gateway, eksctl, zarf, helm-docs, kargo, trivy, helm-operator, chartmuseum, cerbos, pluto, kubescape, linkerd2, cilium-cli, helm-mapkubeapis, zot, helm-push, istio, cluster-api-helm-controller, k8sgpt, k8ssandra-client,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-auth, k3s, wal-g, eksctl, spire-server, hydra, zarf, grafana-mimir, filebrowser, falcoctl, kube-metrics-adapter, minio, trufflehog, policy-controller, ko, zot, opentofu, octo-sts, aactl, crossplane-provider-azure, goreleaser,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: kots, newrelic-infrastructure-agent, k3s, buildkitd, envoy-gateway, eksctl, zarf, syft, fuse-overlayfs-snapshotter, docker-cli-buildx, kargo, trivy, opa, wolfictl, helm-operator, chartmuseum, ctop, kubescape, linkerd2, cilium-cli, docker-compose, zot, osv-scanner,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, spire-server, dive, checksec, containerd, policy-controller, lvm-driver, capslock, kubernetes-csi-driver-hostpath, kbld, aactl, crossplane-provider-azure, gptscript, render-template, trillian, docker-credential-ecr-login, thanos,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: kubebuilder, mongo-tools, sops, prometheus-mysqld-exporter, kpt, harbor-registry-fips, azure-aad-pod-identity-mic, metrics-server-fips, conftest-fips, cert-exporter-fips, dive, flux-notification-controller, prometheus-adapter, prometheus-beat-exporter-fips,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: cilium-cli, kubevela, flux-helm-controller, eksctl, kubescape, k8sgpt, k9s, zarf, helm-push, zot, flux-source-controller, chartmuseum, kots, trivy, up, helm-operator...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: kots, helm-push, flux-helm-controller, chartmuseum, eksctl, helm-operator, kubescape, up, zarf, cilium-cli, k9s, zot, k8sgpt, trivy, kubevela, flux-source-controller...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: cilium-cli, kubevela, flux-helm-controller, eksctl, kubescape, k8sgpt, k9s, zarf, helm-push, zot, flux-source-controller, chartmuseum, kots, trivy, up, helm-operator...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: skaffold, ctop, aactl, k3s, bom, kpt, spire-server-fips, tekton-chains, kubescape, slsa-verifier, scorecard, chartmuseum, up, falcoctl-fips, paranoia, k3d...

SUSE CVE-2019-1000009

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...

CVE-2019-1000009

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...

Path traversal

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...

CVE-2019-1000009

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...

CVE-2019-1000009

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...

CVE-2019-1000009

Helm ChartMuseum versions >=0.1.0 and

CVE-2019-1000009: Improper Limitation of a Pathname to a Restricted Directory

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...