PT-2026-54762

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 0.12.15 Fleet versions prior to 0.13.11 Fleet versions prior to 0.14.6 Fleet versions prior to 0.15.2 Description Fleet forwards Helm authentication credentials BasicAuth to any URL specified in the helm.repo field of a...

PT-2026-55201

Name of the Vulnerable Software and Affected Versions SUSE Rancher Fleet versions prior to 0.15.2 SUSE Rancher Fleet versions prior to 0.14.6 SUSE Rancher Fleet versions prior to 0.13.11 SUSE Rancher Fleet versions prior to 0.12.15 Description Missing validation of valuesFrom references in the He...

SUSE-SU-2026:22455-1 Security update for helm

This update for helm fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266598. Changes for helm: - update to 3.21.2: choredeps: bump the k8s-io group with 2 updates...

Security update for helm (important)

openSUSE security update: security update for helm ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20994-1 Rating: important References: bsc1266598 Cross-References: CVE-2026-39821 CVSS scores: CVE-2026-39821 SUSE : 7.4...

SUSE-SU-2026:22432-1 Security update for helm

This update for helm fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266598. Changes for helm: - update to 3.21.2: choredeps: bump the k8s-io group with 2 updates...

SUSE CVE-2026-54448

Trivy is a security scanner. Prior to 0.71.0, when Trivy scans a Helm chart archive .tgz, its custom tar unpacker reads each entry with io.ReadAlltr and no size limit. An attacker who can place a malicious .tgz file in the scanned path can craft a small compressed archive that decompresses to...

GHSA-73CV-556C-W3G6 mcp-pinot: Unauthenticated tool invocation via default oauth_enabled=False + host 0.0.0.0 bind

Resolution Fixed in v3.1.0, released 2026-05-25. The fix was merged in PR 95 at commit 1c7d3f9. The fix changes the default HTTP bind host to 127.0.0.1, refuses non-loopback HTTP/HTTPS exposure unless OAuth is enabled, makes Helm exposure opt-in and OAuth-gated, and adds parser-backed...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: drone, gitlab-workhorse-ce-fips, frankenphp-8.3, omnictl-multiarch, backup-restore-operator, keda-fips, trivy-operator-fips, elastic-agent-fips, knative-serving-fips, minio, harbor-fips, argo-workflows, tigera-operator, zitadel, trivy-operator, seaweedfs-rocksdb,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: policy-controller, glab, buildkitd, docker-cli-buildx, gomplate, gitlab-runner, ko, step-kms-plugin, crossplane-provider-azure-storage, fscrypt, kubernetes-dashboard, k3s, vault-benchmark, pulumi, flux-notification-controller, terragrunt, teleport, osv-scanner, istio...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: flux, kaf, opentelemetry-collector, flux-image-automation-controller, cert-manager, loki, telegraf, fscrypt, argocd-image-updater, kubernetes-dashboard, k3s, mattermost, cilium, k9s, spire-server, zarf, prometheus, osv-scanner, kubescape, istio, flux-source-controlle...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: flux, kaf, opentelemetry-collector, flux-image-automation-controller, cert-manager, loki, telegraf, fscrypt, argocd-image-updater, kubernetes-dashboard, k3s, mattermost, docker-machine-driver-harvester, cilium, k9s, spire-server, zarf, prometheus, osv-scanner,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, gomplate, step-kms-plugin, fscrypt, kubernetes-dashboard, k3s, pulumi, terragrunt, osv-scanner, istio, flux-source-controller, kine, external-dns, kubernetes, snyk-cli, prometheus-operator, loki, nerdctl, flux-image-automation-controller,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: flux, melange, external-secrets-operator, kaf, dagger, argo-events, flux-image-automation-controller, cert-manager, grype, gomplate, loki, act, nfpm, syft, telegraf, podman, opentofu, argo-cd, fscrypt, argocd-image-updater, kubernetes-dashboard, k3s, mattermost,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: flux, kaf, opentelemetry-collector, cert-manager, docker-cli-buildx, loki, telegraf, podman, fscrypt, kubernetes-dashboard, k3s, mattermost, cilium, spire-server, prometheus, istio, kine, external-dns, helm, kubernetes, knative-serving, zot, snyk-cli, gitlab-kas,...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the parser process. An attacker can cause excessive memory consumption by submitting a specially crafted Helm chart archive that decompresses to a very large size. Remediation...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the parser process. An attacker can cause excessive memory consumption by submitting a specially crafted Helm chart archive that decompresses to a very large size. Remediation...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the parser process. An attacker can cause excessive memory consumption by submitting a specially crafted Helm chart archive that decompresses to a very large size. Remediation...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the parser process. An attacker can cause excessive memory consumption by submitting a specially crafted Helm chart archive that decompresses to a very large size. Remediation...

CVE-2026-54448

Trivy is a security scanner. Prior to 0.71.0, when Trivy scans a Helm chart archive .tgz, its custom tar unpacker reads each entry with io.ReadAlltr and no size limit. An attacker who can place a malicious .tgz file in the scanned path can craft a small compressed archive that decompresses to...

CVE-2026-54448

CVE-2026-54448 affects Trivy. Prior to version 0.71.0, its Helm chart scanner uses a custom tar unpacker that reads each archive entry with io.ReadAll(tr) without a size limit, enabling a malicious .tgz to decompress to gigabytes and trigger the OS OOM killer. This could cause the Trivy process t...