CVE-2024-40635 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, ctop, k3s, flux-helm-controller, docker, wolfictl, cluster-api-helm-controller, flux-source-controller, kubevela, zot, linkerd2, neuvector-scanner, chartmuseum, kubescape, osv-scanner, envoy-gateway, dagger, cert-manager-cmctl, helm, opa, kots, xeo...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, ctop, k3s, flux-helm-controller, docker, wolfictl, cluster-api-helm-controller, flux-source-controller, kubevela, zot, linkerd2, neuvector-scanner, chartmuseum, kubescape, osv-scanner, envoy-gateway, dagger, cert-manager-cmctl, helm, opa, kots, xeo...

helm-3.17.2-1.1 on GA media (moderate)

helm-3.17.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:14906-1 Rating: moderate Cross-References: CVE-2025-22870 CVSS scores: CVE-2025-22870 SUSE : 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L CVE-2025-22870 SUSE : 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N...

OPENSUSE-SU-2025:14906-1 helm-3.17.2-1.1 on GA media

These are all security issues fixed in the helm-3.17.2-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: atlantis, overmind, timoni, litestream, nri-discovery-kubernetes, kubecolor, containerd, regclient, wire-go, kaf, distribution, redka, src-fingerprint, wgcf, docker-compose, go-licenses, flux-kustomize-controller, crossplane-provider-sql, dask-gateway, falcosidekick,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: k3s, ctop, terraform-docs, hubble-ui, kine, pombump, dive, amass, delve, gh, temporal, gosu, wireguard-go, go-md2man, slsa-verifier, secrets-store-csi-driver-provider-aws, cluster-proportional-autoscaler, goreleaser, tailscale, kind, dockerize, timoni,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: kube-bench, prometheus-stackdriver-exporter, pulumi-kubernetes-operator, k8ssandra-operator-fips, smarter-device-manager, harbor-registry, nri-apache, buildkitd, velero-fips, nri-elasticsearch, cloud-sql-proxy-fips, dockerize, kafka-proxy, prometheus-operator,...

openSUSE Security Advisory (SUSE-SU-2024:1137-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:0602-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:0602-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2025:0602-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0602-1 advisory. Update to version 3.17.1: - CVE-2024-45338: Fixed denial of service due to non-linear parsing of case-insensitive...

Security update for helm

This update for helm fixes the following issues: Update to version 3.17.1: CVE-2024-45338: Fixed denial of service due to non-linear parsing of case-insensitive content bsc1235318. CVE-2024-45337: Fixed misuse of ServerConfig.PublicKeyCallback to prevent authorization bypass in golang.org/x/crypt...

SUSE-SU-2025:0602-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.17.1: - CVE-2024-45338: Fixed denial of service due to non-linear parsing of case-insensitive content bsc1235318. - CVE-2024-45337: Fixed misuse of ServerConfig.PublicKeyCallback to prevent authorization bypass in...

Azure Linux 3.0 Security Update: cert-manager / helm (CVE-2024-26147)

The version of cert-manager / helm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26147 advisory. - Helm is a package manager for Charts for Kubernetes. Versions prior to 3.14.2 contain an...

Azure Linux 3.0 Security Update: cert-manager / helm (CVE-2024-25620)

The version of cert-manager / helm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-25620 advisory. - Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources...

Azure Linux 3.0 Security Update: cert-manager / helm / moby-cli / moby-compose / moby-engine (CVE-2023-2253)

The version of cert-manager / helm / moby-cli / moby-compose / moby-engine installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2253 advisory. - A flaw was found in the /v2/catalog endpoint in...

CVE-2022-36049

Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...

CVE-2020-4062

In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...

CVE-2024-29037

datahub-helm provides the Kubernetes Helm charts for deploying Datahub and its dependencies on a Kubernetes cluster. Starting in version 0.1.143 and prior to version 0.2.182, due to configuration issues in the helm chart, if there was a successful initial deployment during a limited window of tim...

helm-3.17.0-2.1 on GA media (moderate)

helm-3.17.0-2.1 on GA media Announcement ID: openSUSE-SU-2025:14725-1 Rating: moderate Cross-References: CVE-2024-45338 CVSS scores: CVE-2024-45338 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2024-45338 SUSE : 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...