GHSA-P77J-4MVH-X3M3 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, buildah, ferretdb, argo-cd, kwok, net-kourier, azure-service-operator, rekor, coredns, sftpgo-plugin-geoipfilter, crossplane-provider-keycloak, amazon-cloudwatch-agent, secrets-store-csi-driver-provider-azure, k8sgpt-operator,...

CVE-2026-33186 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, buildah, ferretdb, argo-cd, kwok, net-kourier, azure-service-operator, rekor, coredns, sftpgo-plugin-geoipfilter, crossplane-provider-keycloak, amazon-cloudwatch-agent, secrets-store-csi-driver-provider-azure, k8sgpt-operator,...

helm-4.1.1-3.1 on GA media (moderate)

helm-4.1.1-3.1 on GA media Announcement ID: openSUSE-SU-2026:10318-1 Rating: moderate Cross-References: CVE-2025-55199 CVSS scores: CVE-2025-55199 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2025-55199 SUSE : 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: chronyexporter, kubevela, podinfo, kubernetes-dashboard, kepler, lvm-driver, step-ca, tetragon-fips, mariadb-operator, prometheus-operator, terraform, step-ca-fips, terraform-provider-grafana, tofu-controller, spegel-fips, envconsul-fips, prometheus-postgres-exporter...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: chronyexporter, kubevela, podinfo, kubernetes-dashboard, pluto, s5cmd, redis-operator-fips, kepler, lvm-driver, step-ca, tetragon-fips, oras, aws-otel-collector, kubernetes-dashboard-metrics-scraper-fips, kuberay-operator-fips, mariadb-operator, node-feature-discover...

OPENSUSE-SU-2026:10318-1 helm-4.1.1-3.1 on GA media

These are all security issues fixed in the helm-4.1.1-3.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-58190 affecting package helm for versions less than 3.14.2-10

CVE-2025-58190 affecting package helm for versions less than 3.14.2-10. A patched version of the package is available...

CVE-2025-47911 affecting package helm for versions less than 3.14.2-10

CVE-2025-47911 affecting package helm for versions less than 3.14.2-10. A patched version of the package is available...

openSUSE 16 Security Update : helm (openSUSE-SU-2026:20327-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20327-1 advisory. - Update to version 3.19.1: CVE-2025-47911: golang.org/x/net/html: Fixed various algorithms with quadratic complexity when parsing HTML document...

Security update for helm (moderate)

openSUSE security update: security update for helm ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20327-1 Rating: moderate References: bsc1251442 bsc1251649 Cross-References: CVE-2025-47911 CVE-2025-58190 CVSS scores: CVE-2025-47911 SUSE : 5.3...

CVE-2026-25750

Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The...

SUSE-SU-2026:20685-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.19.1: CVE-2025-47911: golang.org/x/net/html: Fixed various algorithms with quadratic complexity when parsing HTML documents bsc1251442 CVE-2025-58190: golang.org/x/net/html: Fixed xcessive memory consumption by...

OPENSUSE-SU-2026:20327-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.19.1: CVE-2025-47911: golang.org/x/net/html: Fixed various algorithms with quadratic complexity when parsing HTML documents bsc1251442 CVE-2025-58190: golang.org/x/net/html: Fixed xcessive memory consumption by...

CVE-2026-25750

Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The...

CVE-2026-25750 LangSmith Studio has URL Parameter Injection Vulnerability that Enables Token Theft via Malicious baseUrl

Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The...

Langchain Helm Charts 注入漏洞

Langchain Helm Charts is a Kubernetes Helm chart library developed by LangChain for deploying Langchain applications. Versions of Langchain Helm Charts prior to 0.12.71 contained a injection vulnerability. This vulnerability stemmed from URL parameter injections in LangSmith Studio, which could...

PT-2026-23069

Name of the Vulnerable Software and Affected Versions Langchain Helm Charts versions prior to 0.12.71 Description Langchain Helm Charts, used for deploying Langchain applications on Kubernetes, had a flaw where a specially crafted link could lead to the theft of authentication tokens. This allowe...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose-fips, cluster-api-azure-controller-fips, pluto, kubo, cloud-sql-proxy-fips, zot, chezmoi, crossplane-provider-aws-firehose, goose, cilium-cli, polaris, terraform-provider-grafana, crossplane-provider-aws-kms-fips, dex-fips,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose-fips, cluster-api-azure-controller-fips, pluto, kubo, cloud-sql-proxy-fips, zot, chezmoi, crossplane-provider-aws-firehose, goose, cilium-cli, polaris, terraform-provider-grafana, crossplane-provider-aws-kms-fips, dex-fips,...

openSUSE 16 Security Update : openQA, os-autoinst, openQA-devel-container (openSUSE-SU-2026:20261-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20261-1 advisory. Changes in openQA: - Update to version 5.1771422749.560a3b26: fixmcp: set navbar check expression to read-only feat: support inverted result filters in...