85 matches found
CVE-2025-32386 vulnerabilities
Vulnerabilities for packages: zarf, helm-push, chartmuseum, chart-testing, helm-docs, cert-manager-cmctl, flux-fips, flux-helm-controller-fips, tw, k8ssandra-client, kuma, chartmuseum-fips, harbor-fips, cilium-cli, harbor, flux-helm-controller, chart-testing-fips, cluster-api-helm-controller-fips...
GHSA-265R-HFXG-FHMG vulnerabilities
Vulnerabilities for packages: kots, newrelic-infrastructure-agent, k3s, buildkitd, envoy-gateway, eksctl, zarf, syft, fuse-overlayfs-snapshotter, docker-cli-buildx, kargo, trivy, opa, wolfictl, helm-operator, chartmuseum, ctop, kubescape, linkerd2, cilium-cli, docker-compose, zot, osv-scanner,...
CVE-2022-36049
Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...
BIT-HELM-2022-36049 Flux2 Helm Controller denial of service
Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...
GHSA-R53H-JV2G-VPX6 vulnerabilities
Vulnerabilities for packages: cilium-cli, kubevela, flux-helm-controller, eksctl, kubescape, k8sgpt, k9s, zarf, helm-push, zot, flux-source-controller, chartmuseum, kots, trivy, up, helm-operator...
GHSA-V53G-5GJP-272R vulnerabilities
Vulnerabilities for packages: kots, helm-push, flux-helm-controller, chartmuseum, eksctl, helm-operator, kubescape, up, zarf, cilium-cli, k9s, zot, k8sgpt, trivy, kubevela, flux-source-controller...
CVE-2024-25620 vulnerabilities
Vulnerabilities for packages: cilium-cli, kubevela, flux-helm-controller, eksctl, kubescape, k8sgpt, k9s, zarf, helm-push, zot, flux-source-controller, chartmuseum, kots, trivy, up, helm-operator...
GHSA-XW73-RW38-6VJC vulnerabilities
Vulnerabilities for packages: cadvisor-fips, ctop, kpt, loki, zarf, skopeo, chartmuseum, nerdctl, policy-controller, crane, ko-fips, cosign-fips, kubevela, pulumi, tekton-chains, k3s, newrelic-infrastructure-agent, gitsign, k8sgpt, slsa-verifier, scorecard, rancher-machine, cri-tools, dagger,...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: cadvisor-fips, ctop, kpt, loki, zarf, skopeo, chartmuseum, nerdctl, policy-controller, crane, ko-fips, cosign-fips, kubevela, pulumi, tekton-chains, k3s, newrelic-infrastructure-agent, gitsign, k8sgpt, slsa-verifier, scorecard, rancher-machine, cri-tools, dagger,...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: prometheus-adapter-fips, smarter-device-manager-fips, metrics-server-fips, conftest-fips, kubernetes-csi-livenessprobe-fips, prometheus-stackdriver-exporter, kubevela, volume-modifier-for-k8s-fips, prometheus-blackbox-exporter, timestamp-authority-fips, slsa-verifier...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: cortex, slsa-verifier, kubeflow, buildkitd, terraform-provider-sendgrid, src, kubescape, dgraph, up, spark-operator, k3d, kubevela, scorecard, aactl...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: kind, certificate-transparency, aws-efs-csi-driver, minio, nginx-stable, dex, ko, k3d, aactl, helm, gobuster, gitness, src, weaviate, memcached-exporter, terraform, scorecard, pulumi-language-dotnet, envoy-ratelimit, oauth2-proxy, secrets-store-csi-driver-provider-gc...
CVE-2023-2253 vulnerabilities
Vulnerabilities for packages: kpt, aactl, argocd-image-updater-fips, bom, argocd-image-updater, kubernetes-dashboard...
GHSA-HQXW-F8MX-CPMW vulnerabilities
Vulnerabilities for packages: kpt, aactl, argocd-image-updater-fips, bom, argocd-image-updater, kubernetes-dashboard...
CVE-2023-28841 vulnerabilities
Vulnerabilities for packages: melange, helm, ctop, bom, apko, up, ko...
GHSA-232P-VWFF-86MP vulnerabilities
Vulnerabilities for packages: melange, helm, ctop, bom, apko, up, ko...
GHSA-33PG-M6JH-5237 vulnerabilities
Vulnerabilities for packages: melange, helm, ctop, bom, apko, up, ko...
GHSA-6WRF-MXFJ-PF5P vulnerabilities
Vulnerabilities for packages: melange, helm, ctop, bom, apko, up, ko...
CBL Mariner 2.0 Security Update: helm (CVE-2022-36049)
The version of helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-36049 advisory. - Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-...