1528 matches found
PT-2025-33104
Name of the Vulnerable Software and Affected Versions: Helm versions prior to 3.18.5 Description: Helm, a package manager for Kubernetes Charts, is susceptible to a denial-of-service issue. A crafted JSON Schema file can cause Helm to exhaust available memory, leading to an out-of-memory OOM...
PT-2025-33103
Name of the Vulnerable Software and Affected Versions: Helm versions prior to 3.18.5 Description: Helm is a package manager for Charts for Kubernetes. An improper validation of type error when parsing Chart.yaml and index.yaml files can lead to a panic. This issue impacts YAML validation where a...
CVE-2025-47907 vulnerabilities
Vulnerabilities for packages: polaris, rekor, k3d, secrets-store-csi-driver-provider-gcp, steampipe, xeol, kots, helm-operator, azure-workload-identity-webhook, metrics-server, witness, terragrunt, falcoctl, argocd-image-updater, kiali, nvidia-container-toolkit, thanos, rook, yunikorn-web,...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: polaris, rekor, k3d, secrets-store-csi-driver-provider-gcp, steampipe, xeol, kots, helm-operator, azure-workload-identity-webhook, metrics-server, witness, terragrunt, falcoctl, argocd-image-updater, kiali, nvidia-container-toolkit, thanos, rook, yunikorn-web,...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: argo-rollouts-fips, nri-mysql, minio-operator, cluster-proportional-autoscaler, hydra, cortex-fips, neuvector, kyverno-fips, kine, cargobump, sftpgo-plugin-eventsearch, kubernetes-dashboard-metrics-scraper-fips, aws-nuke, hello-world-golang, cass-operator,...
SUSE-SU-2025:20516-1 Security update for helm
This update for helm fixes the following issues: Update to version 3.18.4 bsc1246152, CVE-2025-53547: Disabling linter due to unknown issue f20a4ad Matt Farina builddeps: bump the k8s-io group with 7 updates 563b094 dependabotbot Updating link handling 00de613 Matt Farina Update to version 3.18.3...
Security update for helm
This update for helm fixes the following issues: Update to version 3.18.4 bsc1246152, CVE-2025-53547: Disabling linter due to unknown issue f20a4ad Matt Farina builddeps: bump the k8s-io group with 7 updates 563b094 dependabotbot Updating link handling 00de613 Matt Farina Update to version 3.18.3...
CVE-2025-41240
Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path /opt/bitnami//secrets that is located within the web server document root. In affected versions, this can lead to unauthenticated access to sensitive credentials via HTTP/S. A remote attacker could retrieve these secrets ...
CVE-2025-41240
Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path /opt/bitnami//secrets that is located within the web server document root. In affected versions, this can lead to unauthenticated access to sensitive credentials via HTTP/S. A remote attacker could retrieve these secrets ...
CVE-2025-41240
Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path /opt/bitnami//secrets that is located within the web server document root. In affected versions, this can lead to unauthenticated access to sensitive credentials via HTTP/S. A remote attacker could retrieve these secrets ...
CVE-2025-41240
CVE-2025-41240 involves Bitnami Helm charts mounting Kubernetes Secrets under a predictable path (/opt/bitnami/*/secrets) inside the web server document root. Affected deployments using the default usePasswordFiles=true may expose secrets via HTTP/S when the application is externally accessible, ...
CVE-2025-41240 Mounted Kubernetes Secrets under a predictable path located within the web server document root
Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path /opt/bitnami//secrets that is located within the web server document root. In affected versions, this can lead to unauthenticated access to sensitive credentials via HTTP/S. A remote attacker could retrieve these secrets ...
CVE-2025-41240 Mounted Kubernetes Secrets under a predictable path located within the web server document root
Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path /opt/bitnami//secrets that is located within the web server document root. In affected versions, this can lead to unauthenticated access to sensitive credentials via HTTP/S. A remote attacker could retrieve these secrets ...
Rucio Helm Charts 安全漏洞
Rucio Helm Charts is an open source library for Rucio by rucio. A security vulnerability exists in Rucio Helm Charts that stems from a predictable Kubernetes Secrets mount path that could lead to unauthorized access to sensitive credentials...
Maintenance update for Multi-Linux Manager 4.3: Server, Proxy and Retail Branch Server
Description: This update fixes the following issues: mgr-daemon: Version 4.3.12-0: Updated translation strings proxy-helm: Version 4.3.17: Chart rebuilt to the newest version with updated dependencies for SUSE Manager 4.3.16 proxy-httpd-image: Version 4.3.18: Image rebuilt to the newest version...
GO-2025-3802 Helm vulnerable to Code Injection through malicious chart.yaml content in helm.sh/helm
Helm vulnerable to Code Injection through malicious chart.yaml content in helm.sh/helm...
CVE-2025-54064 rucio-server, rucio-ui, and rucio-webui vulnerable to insertion of X-Rucio-Auth-Token in apache access logfiles
Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. The common Rucio helm-charts for the rucio-server, rucio-ui, and rucio-webui define the log format for the apache access log of these components...
Rucio Helm Charts 日志信息泄露漏洞
Rucio Helm Charts is a library for Rucio in the rucio open source. Rucio Helm Charts suffers from a log message disclosure vulnerability that stems from logging X-Rucio-Auth-Token, which could lead to credential disclosure...
CBL Mariner 2.0 Security Update: helm (CVE-2025-53547)
The version of helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-53547 advisory. - Helm is a package manager for Charts for Kubernetes. Prior to 3.18.4, a specially crafted Chart.yaml file alon...
