SUSE SLES15 / openSUSE 15 Security Update : helm (SUSE-SU-2026:0948-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0948-1 advisory. This update for helm rebuilds it against the current go 1.25 security release. Tenable has extracted the preceding description...

SUSE-SU-2026:0948-1 Security update for helm

This update for helm rebuilds it against the current go 1.25 security release...

PT-2026-29177

This update for helm rebuilds it against the current go 1.25 security release...

GHSA-P77J-4MVH-X3M3 vulnerabilities

Vulnerabilities for packages: argo-cd, src, trufflehog, fluent-bit-plugin-loki, flux-kustomize-controller, flux-source-controller, opentelemetry-operator, mountpoint-s3-csi-driver, dkron, temporal-server, seaweedfs, velero-plugin-for-aws, amazon-k8s-cni, cluster-api-helm-controller,...

CVE-2026-33186 vulnerabilities

Vulnerabilities for packages: argo-cd, src, trufflehog, fluent-bit-plugin-loki, flux-kustomize-controller, flux-source-controller, opentelemetry-operator, mountpoint-s3-csi-driver, dkron, temporal-server, seaweedfs, velero-plugin-for-aws, amazon-k8s-cni, cluster-api-helm-controller,...

helm-4.1.1-3.1 on GA media (moderate)

helm-4.1.1-3.1 on GA media Announcement ID: openSUSE-SU-2026:10318-1 Rating: moderate Cross-References: CVE-2025-55199 CVSS scores: CVE-2025-55199 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2025-55199 SUSE : 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: terraform-provider-acme-fips, kubo-fips, jobset-fips, request-1279-14, yunikorn-k8shim, nemo, aws-signer-notation-plugin, commercial-expanso-edge, datadog-agent, prometheus-elasticsearch-exporter-fips, thanos-receive-controller-fips, chaos-mesh,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: terraform-provider-acme-fips, kubo-fips, jobset-fips, request-1279-14, nemo, commercial-expanso-edge, datadog-agent, prometheus-elasticsearch-exporter-fips, thanos-receive-controller-fips, chaos-mesh, crossplane-provider-aws-sqs-fips, go-discover-fips,...

OPENSUSE-SU-2026:10318-1 helm-4.1.1-3.1 on GA media

These are all security issues fixed in the helm-4.1.1-3.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-47911 affecting package helm for versions less than 3.14.2-10

CVE-2025-47911 affecting package helm for versions less than 3.14.2-10. A patched version of the package is available...

CVE-2025-58190 affecting package helm for versions less than 3.14.2-10

CVE-2025-58190 affecting package helm for versions less than 3.14.2-10. A patched version of the package is available...

openSUSE 16 Security Update : helm (openSUSE-SU-2026:20327-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20327-1 advisory. - Update to version 3.19.1: CVE-2025-47911: golang.org/x/net/html: Fixed various algorithms with quadratic complexity when parsing HTML document...

Security update for helm (moderate)

openSUSE security update: security update for helm ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20327-1 Rating: moderate References: bsc1251442 bsc1251649 Cross-References: CVE-2025-47911 CVE-2025-58190 CVSS scores: CVE-2025-47911 SUSE : 5.3...

CVE-2026-25750

Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The...

SUSE-SU-2026:20685-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.19.1: CVE-2025-47911: golang.org/x/net/html: Fixed various algorithms with quadratic complexity when parsing HTML documents bsc1251442 CVE-2025-58190: golang.org/x/net/html: Fixed xcessive memory consumption by...

OPENSUSE-SU-2026:20327-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.19.1: CVE-2025-47911: golang.org/x/net/html: Fixed various algorithms with quadratic complexity when parsing HTML documents bsc1251442 CVE-2025-58190: golang.org/x/net/html: Fixed xcessive memory consumption by...

CVE-2026-25750

Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The...

CVE-2026-25750 LangSmith Studio has URL Parameter Injection Vulnerability that Enables Token Theft via Malicious baseUrl

Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The...

Langchain Helm Charts 注入漏洞

Langchain Helm Charts is a Kubernetes Helm chart library developed by LangChain for deploying Langchain applications. Versions of Langchain Helm Charts prior to 0.12.71 contained a injection vulnerability. This vulnerability stemmed from URL parameter injections in LangSmith Studio, which could...

CVE-2026-25750: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The...