CLEANSTART-2026-NV73889 Security fixes in helm-fips 3.19.5-r0

Package helm-fips version 3.19.5-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-JA07066 Security fixes in helm-fips 4.0.5-r0

Package helm-fips version 4.0.5-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-UT23053 Security fixes in helm-operator 1.42.2-r3

Package helm-operator version 1.42.2-r3 fixes 4 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-QP97203 Security fixes in helm 4.0.5-r2

Package helm version 4.0.5-r2 fixes 43 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27143, CVE-2026-27144...

CLEANSTART-2026-MR47325 Security fixes in helm 3.20.2-r0

Package helm version 3.20.2-r0 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-EU29401 Security fixes in helm-fips 3.19.0-r2

Package helm-fips version 3.19.0-r2 fixes 4 vulnerabilities: ghsa-pwhc-rpq9-4c8w, ghsa-m6hq-p25p-ffr2, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-IP24162 Security fixes in helm 4.0.5-r5

Package helm version 4.0.5-r5 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

PT-2026-66499

Name of the Vulnerable Software and Affected Versions OpenCost versions prior to 1.121.0 Description Authentication is not properly enforced for the 'GET /helmValues' endpoint, which exposes the base64-decoded HELM VALUES environment variable containing cloud provider credentials. Furthermore, th...

PT-2026-85869

Package helm-fips version 3.19.0-r2 fixes 4 vulnerabilities: ghsa-pwhc-rpq9-4c8w, ghsa-m6hq-p25p-ffr2, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

PT-2026-86106

Package helm-fips version 3.20.2-r1 fixes 1 vulnerabilities: ghsa-p77j-4mvh-x3m3...

PT-2026-85946

Package helm-operator version 1.42.3-r1 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

PT-2026-86067

Package helm-operator-fips version 1.41.1-r0 fixes 3 vulnerabilities: ghsa-9h84-gmv7-982p, ghsa-mf38-5pwr-xv68, ghsa-x4rx-4gw5-53pq...

helm-4.2.3-4.1 on GA media (moderate)

helm-4.2.3-4.1 on GA media Announcement ID: openSUSE-SU-2026:11386-1 Rating: moderate Cross-References: CVE-2026-63308 CVSS scores: CVE-2026-63308 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

PT-2026-85935

Package helm-fips version 3.17-4-r1 fixes 4 vulnerabilities: ghsa-6v2p-p543-phr9, ghsa-pwhc-rpq9-4c8w, ghsa-265r-hfxg-fhmg, ghsa-m6hq-p25p-ffr2...

SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2026:3342-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3342-1 advisory. Update to version 3.21.3. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for...

Security update for helm

This update for helm fixes the following issues: Update to version 3.21.3. CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266598. CVE-2026-56852: golang.org/x/text/unicode/norm: handling input...

SUSE-SU-2026:3342-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.21.3. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266598. - CVE-2026-56852: golang.org/x/text/unicode/norm: handling inp...

OPENSUSE-SU-2026:11386-1 helm-4.2.3-4.1 on GA media

These are all security issues fixed in the helm-4.2.3-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11387-1 helm3-3.21.3-4.1 on GA media

These are all security issues fixed in the helm3-3.21.3-4.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES16: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2026:22855-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22855-1 advisory. This update for helm fixes the following issues - Update to version 3.21.3 - CVE-2026-39821: golang.org/x/net/idna: failure to...