AZL-38023 CVE-2024-25620 affecting package helm for versions less than 3.13.2-3

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

AZL-34355 CVE-2024-25620 affecting package cert-manager for versions less than 1.11.2-12

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: kubescape, helm-push, chartmuseum, kots, zot, up, cilium-cli, eksctl, trivy, helm-operator, kubevela, zarf, flux-helm-controller, k8sgpt, k9s, flux-source-controller...

AZL-34583 CVE-2024-25620 affecting package cert-manager for versions less than 1.12.12-2

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

Directory traversal

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

UBUNTU-CVE-2024-25620

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

CVE-2024-25620

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

Helm Path Traversal Vulnerability

Helm is a Kubernetes package manager. A path traversal vulnerability exists in Helm versions prior to 3.14.0, which stems from the presence of path traversal...

CVE-2024-25620 Dependency management path traversal in helm

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

CVE-2024-25620

CVE-2024-25620 – Helm path traversal vulnerability : The connected Nessus entry confirms a concrete issue in Helm where saving a chart with a relative path in Chart.yaml can cause the chart to be saved outside its intended directory. This is due to improper validation of user-supplied input, enab...

CVE-2024-25620 Dependency management path traversal in helm

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

CVE-2024-25620 Dependency management path traversal in helm

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

PT-2024-4076 · Helm +2 · Helm +2

Name of the Vulnerable Software and Affected Versions: Helm versions prior to 3.14.1 Description: The issue is related to the Helm client or SDK saving a chart outside its expected directory based on changes in the relative path within the Chart.yaml file. This occurs when the chart's name includ...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: kargo, flux, falcoctl-fips, newrelic-infrastructure-agent, cadvisor-fips, docker-machine-driver-harvester, gitsign, kots, scorecard, guac, skaffold, dagger, k3s, rancher-machine, kubeflow-katib, cosign, eksctl, ko-fips, crane, kubevela, policy-controller,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: kargo, flux, falcoctl-fips, newrelic-infrastructure-agent, cadvisor-fips, docker-machine-driver-harvester, gitsign, kots, scorecard, guac, skaffold, dagger, k3s, rancher-machine, kubeflow-katib, cosign, eksctl, ko-fips, crane, kubevela, policy-controller,...

CVE-2023-44487 affecting package helm for versions less than 3.14.0-1

CVE-2023-44487 affecting package helm for versions less than 3.14.0-1. An upgraded version of the package is available that resolves this issue...

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, kots, flux-source-controller, skaffold, helm-push, cilium-cli, eksctl, kaniko, gitness, kubevela, fuse-overlayfs-snapshotter, melange, kubescape, zot, helm, flux-helm-controller, k8sgpt, buildkitd, k3d, up, grype, ctop, trivy...

conmon security update

conmon 2.1.3-7 - Resolve CVE-2023-39325 2.1.3-6 - Add ol8baseoslatest, and ol9baseoslatest, to Jenkinsfile 2.1.3-5 - Add systemd-devel as build requirement 2.1.3-4 - Add support ARM build cri-o 1.26.3-3 - Resolve CVE-2023-39325 1.26.3-2 - Add support for ARM build cri-tools 1.26.1-3 - Resolve...

conmon security update

conmon 2.1.3-7 - Resolve CVE-2023-39325 2.1.3-6 - Add ol8baseoslatest, and ol9baseoslatest, to Jenkinsfile 2.1.3-5 - Add systemd-devel as build requirement 2.1.3-4 - Add support ARM build cri-o 1.26.3-3 - Resolve CVE-2023-39325 1.26.3-2 - Add support for ARM build cri-tools 1.26.1-3 - Resolve...

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-sql, flux, ollama, terraform, prometheus-mongodb-exporter, cloudflared, prometheus-postgres-exporter, crossplane-provider-azure-managedidentity, fulcio, fq, oauth2-proxy, flux-source-controller, step-ca, k3s, trillian, atlantis, terragrunt,...