CVE-2025-58190 affecting package helm for versions less than 3.14.2-10

CVE-2025-58190 affecting package helm for versions less than 3.14.2-10. A patched version of the package is available...

CVE-2025-47911 affecting package helm for versions less than 3.14.2-10

CVE-2025-47911 affecting package helm for versions less than 3.14.2-10. A patched version of the package is available...

openSUSE 16 Security Update : helm (openSUSE-SU-2026:20327-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20327-1 advisory. - Update to version 3.19.1: CVE-2025-47911: golang.org/x/net/html: Fixed various algorithms with quadratic complexity when parsing HTML document...

Security update for helm (moderate)

openSUSE security update: security update for helm ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20327-1 Rating: moderate References: bsc1251442 bsc1251649 Cross-References: CVE-2025-47911 CVE-2025-58190 CVSS scores: CVE-2025-47911 SUSE : 5.3...

CVE-2026-25750

Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The...

SUSE-SU-2026:20685-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.19.1: CVE-2025-47911: golang.org/x/net/html: Fixed various algorithms with quadratic complexity when parsing HTML documents bsc1251442 CVE-2025-58190: golang.org/x/net/html: Fixed xcessive memory consumption by...

OPENSUSE-SU-2026:20327-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.19.1: CVE-2025-47911: golang.org/x/net/html: Fixed various algorithms with quadratic complexity when parsing HTML documents bsc1251442 CVE-2025-58190: golang.org/x/net/html: Fixed xcessive memory consumption by...

CVE-2026-25750

Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The...

CVE-2026-25750 LangSmith Studio has URL Parameter Injection Vulnerability that Enables Token Theft via Malicious baseUrl

Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The...

CVE-2026-25750: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The...

PT-2026-23069

Name of the Vulnerable Software and Affected Versions Langchain Helm Charts versions prior to 0.12.71 Description Langchain Helm Charts, used for deploying Langchain applications on Kubernetes, had a flaw where a specially crafted link could lead to the theft of authentication tokens. This allowe...

Langchain Helm Charts 注入漏洞

Langchain Helm Charts is a Kubernetes Helm chart library developed by LangChain for deploying Langchain applications. Versions of Langchain Helm Charts prior to 0.12.71 contained a injection vulnerability. This vulnerability stemmed from URL parameter injections in LangSmith Studio, which could...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller-fips, mattermost, crossplane-provider-aws-elasticache, fleet-server, crossplane-provider-aws-servicediscovery-fips, crossplane-provider-aws-sns-fips, pulumi-language-dotnet, terraform-provider-acme-fips, cloudbeat-fips,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller-fips, mattermost, crossplane-provider-aws-elasticache, fleet-server, crossplane-provider-aws-servicediscovery-fips, crossplane-provider-aws-sns-fips, pulumi-language-dotnet, terraform-provider-acme-fips, cloudbeat-fips,...

openSUSE 16 Security Update : openQA, os-autoinst, openQA-devel-container (openSUSE-SU-2026:20261-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20261-1 advisory. Changes in openQA: - Update to version 5.1771422749.560a3b26: fixmcp: set navbar check expression to read-only feat: support inverted result filters in...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: apko, argo-workflows, crossplane-provider-aws-kms, argo-rollouts, ksops, syft, docker, trufflehog, witness, nuclei, kubescape, cerbos, src-fingerprint, crossplane, gitea, k9s, melange, crossplane-provider-aws-rds, extism, helm, crossplane-provider-aws-eks,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: apko, argo-workflows, crossplane-provider-aws-kms, argo-rollouts, ksops, syft, docker, trufflehog, witness, nuclei, kubescape, cerbos, src-fingerprint, crossplane, gitea, k9s, melange, crossplane-provider-aws-rds, extism, helm, crossplane-provider-aws-eks,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-plugins-kyverno-fips, reports-server, crossplane-provider-azure-authorization, crossplane, terragrunt, crossplane-provider-aws-elasticache, osv-scanner, kyverno, omnictl-multiarch, databricks-cli, cluster-api-fips,...

CLEANSTART-2026-VI85055 Within HostnameError

Multiple security vulnerabilities affect the helm package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-VZ85637 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...