openSUSE Security Advisory (SUSE-SU-2026:0948-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2026:0948-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 / openSUSE 15 Security Update : helm (SUSE-SU-2026:0948-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0948-1 advisory. This update for helm rebuilds it against the current go 1.25 security release. Tenable has extracted the preceding description...

SUSE-SU-2026:0948-1 Security update for helm

This update for helm rebuilds it against the current go 1.25 security release...

GHSA-P77J-4MVH-X3M3 vulnerabilities

Vulnerabilities for packages: crossplane-provider-sql, crossplane-provider-aws-firehose, cass-operator, hubble, temporal, helm-push, rancher-agent, gatus, sftpgo-plugin-auth, flux-image-reflector-controller, argo-workflows, datadog-agent, cloud-provider-aws, fuse-overlayfs-snapshotter,...

CVE-2026-33186 vulnerabilities

Vulnerabilities for packages: crossplane-provider-sql, crossplane-provider-aws-firehose, cass-operator, hubble, temporal, helm-push, rancher-agent, gatus, sftpgo-plugin-auth, flux-image-reflector-controller, argo-workflows, datadog-agent, cloud-provider-aws, fuse-overlayfs-snapshotter,...

helm-4.1.1-3.1 on GA media (moderate)

helm-4.1.1-3.1 on GA media Announcement ID: openSUSE-SU-2026:10318-1 Rating: moderate Cross-References: CVE-2025-55199 CVSS scores: CVE-2025-55199 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2025-55199 SUSE : 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: prometheus-operator, spiffe-helper, thanos, kube-state-metrics, apm-server-fips, kpt, nvidia-container-toolkit, k6-fips, gitaly, crossplane-provider-aws-memorydb, tigera-operator, crossplane-function-go-templating, cass-operator, kubernetes-dashboard-api-fips,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: nri-redis, prometheus-operator, spiffe-helper, thanos, aws-load-balancer-controller-fips, kube-state-metrics, apm-server-fips, kpt, nri-consul-fips, regclient-fips, nvidia-container-toolkit, supercronic, vale, k6-fips, gitaly,...

OPENSUSE-SU-2026:10318-1 helm-4.1.1-3.1 on GA media

These are all security issues fixed in the helm-4.1.1-3.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-58190 affecting package helm for versions less than 3.14.2-10

CVE-2025-58190 affecting package helm for versions less than 3.14.2-10. A patched version of the package is available...

CVE-2025-47911 affecting package helm for versions less than 3.14.2-10

CVE-2025-47911 affecting package helm for versions less than 3.14.2-10. A patched version of the package is available...

openSUSE 16 Security Update : helm (openSUSE-SU-2026:20327-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20327-1 advisory. - Update to version 3.19.1: CVE-2025-47911: golang.org/x/net/html: Fixed various algorithms with quadratic complexity when parsing HTML document...

Security update for helm (moderate)

openSUSE security update: security update for helm ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20327-1 Rating: moderate References: bsc1251442 bsc1251649 Cross-References: CVE-2025-47911 CVE-2025-58190 CVSS scores: CVE-2025-47911 SUSE : 5.3...

CVE-2026-25750

Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The...

SUSE-SU-2026:20685-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.19.1: CVE-2025-47911: golang.org/x/net/html: Fixed various algorithms with quadratic complexity when parsing HTML documents bsc1251442 CVE-2025-58190: golang.org/x/net/html: Fixed xcessive memory consumption by...

OPENSUSE-SU-2026:20327-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.19.1: CVE-2025-47911: golang.org/x/net/html: Fixed various algorithms with quadratic complexity when parsing HTML documents bsc1251442 CVE-2025-58190: golang.org/x/net/html: Fixed xcessive memory consumption by...

CVE-2026-25750

Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The...

CVE-2026-25750 LangSmith Studio has URL Parameter Injection Vulnerability that Enables Token Theft via Malicious baseUrl

Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The...

Langchain Helm Charts 注入漏洞

Langchain Helm Charts is a Kubernetes Helm chart library developed by LangChain for deploying Langchain applications. Versions of Langchain Helm Charts prior to 0.12.71 contained a injection vulnerability. This vulnerability stemmed from URL parameter injections in LangSmith Studio, which could...