SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2025:4437-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:4437-1 advisory. This update for helm rebuilds it against current GO to fix security issues in go-stdlib. Tenable has extracted the preceding...

Credential caching in Headlamp with Helm enabled

Original tracking issue: https://github.com/kubernetes-sigs/headlamp/issues/4282 CVSS Rating: High 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Description of vulnerability A security issue was discovered in the in-cluster version of Headlamp where unauthenticated users may be able to reuse...

Security update for helm

This update for helm rebuilds it against current GO to fix security issues in go-stdlib. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE...

SUSE-SU-2025:4437-1 Security update for helm

This update for helm rebuilds it against current GO to fix security issues in go-stdlib...

PT-2025-52206

Name of the Vulnerable Software and Affected Versions Headlamp versions prior to 0.39.0 Description A configuration issue with config.enableHelm: true in the Headlamp user interface for Kubernetes cluster management leads to information disclosure through caching when processing the...

PT-2025-54913

This update for helm rebuilds it against current GO to fix security issues in go-stdlib...

SUSE-SU-2025:21221-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.19.1 bsc1251649, CVE-2025-58190, bsc1251442, CVE-2025-47911: choredeps: bump github.com/containerd/containerd from 1.7.28 to 1.7.29 jsonschema: warn and ignore unresolved URN $ref to match v3.18.4 Avoid "panic: interface...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: osv-scanner, nats-server, prometheus-operator, rancher-helm, falco-no-driver, terraform, opa, rancher-system-agent, paranoia, metrics-server, supercronic, secrets-store-csi-driver, src, grafana, polaris, github-mcp-server, kubernetes-dashboard-auth, k8sgpt,...

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: osv-scanner, nats-server, prometheus-operator, rancher-helm, falco-no-driver, terraform, opa, rancher-system-agent, paranoia, metrics-server, supercronic, secrets-store-csi-driver, src, grafana, polaris, github-mcp-server, kubernetes-dashboard-auth, k8sgpt,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.2, oauth2-proxy, opa-fips, image-factory-fips, etcd, flux-kustomize-controller-fips, prometheus-mysqld-exporter-fips, rancher, kubernetes-csi-livenessprobe-fips, k8sgateway-fips, splunk-otel-collector, prometheus-postgres-exporter-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: spegel, prometheus-operator, grafana-rollout-operator, helm-mapkubeapis, rancher-system-agent, src-fingerprint, grafana-alloy, external-dns, kots, grafana, polaris, pdfcpu, nri-redis, tofu-controller, ingress-nginx-controller, runc, harbor-scanner-trivy, aws-nuke,...

BIT-FLUX-2022-36049 Flux2 Helm Controller denial of service

Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...

BIT-FLUX-2022-24817 Improper kubeconfig validation allows arbitrary code execution

Flux2 is an open and extensible continuous delivery solution for Kubernetes. Flux2 versions between 0.1.0 and 0.29.0, helm-controller 0.1.0 to v0.19.0, and kustomize-controller 0.1.0 to v0.23.0 are vulnerable to Code Injection via malicious Kubeconfig. In multi-tenancy deployments this can also...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.20.6 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.6 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

RHEA-2025:0507 Red Hat Enhancement Advisory: Advisory for publishing Helm 3.15.4 GA release

Bulletin has no description...

EUVD-2025-200055

Malicious code in kubernetes-helm npm...

Malicious code in kubernetes-helm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d507ab92764d5a31189e5fc42060eca5ba9b17fd8fc4d35de9ad266c1eb63144 The package kubernetes-helm was found to contain malicious code...

MAL-2025-191514 Malicious code in kubernetes-helm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d507ab92764d5a31189e5fc42060eca5ba9b17fd8fc4d35de9ad266c1eb63144 The package kubernetes-helm was found to contain malicious code...

CVE-2025-64751

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.4.0 to v1.11.0 openfga-0.1.34 = Helm chart = openfga-0.2.48, v.1.4.0 = docker = v.1.11.0 are vulnerable to improper policy enforcement when certain Check and...

openSUSE Security Advisory (SUSE-SU-2025:4190-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...