CLEANSTART-2026-CY22332 Security fixes in helm-operator 1.42.2-r1

Package helm-operator version 1.42.2-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-MR47325 Security fixes in helm 3.20.2-r0

Package helm version 3.20.2-r0 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-CL16763 Security fixes in helm 4.0.1-r1

Package helm version 4.0.1-r1 fixes 5 vulnerabilities: CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142...

CLEANSTART-2026-AU93241 Security fixes in helm-operator 1.42.1-r0

Package helm-operator version 1.42.1-r0 fixes 30 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-39820, ghsa-p77j-4mvh-x3m3, CVE-2026-27143, CVE-2026-42499...

CLEANSTART-2026-NV73889 Security fixes in helm-fips 3.19.5-r0

Package helm-fips version 3.19.5-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-QV10539 Security fixes in helm 4.1.4-r0

Package helm version 4.1.4-r0 fixes 4 vulnerabilities: CVE-2026-50151, CVE-2026-50162, ghsa-vh4v-2xq2-g5cg, CVE-2026-48978...

CLEANSTART-2026-HJ82328 Security fixes in helm-fips 3.20.2-r0

Package helm-fips version 3.20.2-r0 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-LL09783 Security fixes in helm 4.0.0-r0

Package helm version 4.0.0-r0 fixes 1 vulnerabilities: CVE-2025-61729...

CLEANSTART-2026-GH10343 Security fixes in helm-fips 3.17-4-r0

Package helm-fips version 3.17-4-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

helm-4.2.3-4.1 on GA media (moderate)

helm-4.2.3-4.1 on GA media Announcement ID: openSUSE-SU-2026:11386-1 Rating: moderate Cross-References: CVE-2026-63308 CVSS scores: CVE-2026-63308 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

PT-2026-66499

Name of the Vulnerable Software and Affected Versions OpenCost versions prior to 1.121.0 Description Authentication is not properly enforced for the 'GET /helmValues' endpoint, which exposes the base64-decoded HELM VALUES environment variable containing cloud provider credentials. Furthermore, th...

SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2026:3342-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3342-1 advisory. Update to version 3.21.3. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for...

Security update for helm

This update for helm fixes the following issues: Update to version 3.21.3. CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266598. CVE-2026-56852: golang.org/x/text/unicode/norm: handling input...

SUSE-SU-2026:3342-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.21.3. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266598. - CVE-2026-56852: golang.org/x/text/unicode/norm: handling inp...

SUSE SLES16: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2026:22855-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22855-1 advisory. This update for helm fixes the following issues - Update to version 3.21.3 - CVE-2026-39821: golang.org/x/net/idna: failure to...

OPENSUSE-SU-2026:11386-1 helm-4.2.3-4.1 on GA media

These are all security issues fixed in the helm-4.2.3-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11387-1 helm3-3.21.3-4.1 on GA media

These are all security issues fixed in the helm3-3.21.3-4.1 package on the GA media of openSUSE Tumbleweed...

GO-2026-5983 Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: fluent-operator, datadog-operator, cert-manager, rancher, hubble-ui, kyverno-notation-aws, k8ssandra-client, kube-state-metrics, kubernetes-csi-external-attacher, datadog-agent, rke2-cloud-provider, cilium, kubernetes-csi-external-resizer, kubescape-operator,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: backup-restore-operator, istio, cloud-provider-azure-fips, ceph-csi-operator-fips, cluster-api-provider-vsphere, kubernetes-csi-external-snapshotter, newrelic-k8s-metrics-adapter, metrics-server, yunikorn-k8shim-fips, emissary, elastic-agent, cloud-provider-azure,...