Lucene search
+L

1943 matches found

OSV
OSV
•added 2026/01/30 3:22 p.m.•14 views

CLEANSTART-2026-GS02052 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00661EPSS
SaveExploits2References21
OSV
OSV
•added 2026/01/30 3:18 p.m.•24 views

CLEANSTART-2026-NS41924 Within HostnameError

Multiple security vulnerabilities affect the helm-operator package. Within HostnameError. See references for individual vulnerability details...

9.8CVSS7.3AI score0.00661EPSS
SaveExploits2References19
OSV
OSV
•added 2026/01/30 3:18 p.m.•7 views

CLEANSTART-2026-CY03855 tar

Multiple security vulnerabilities affect the helm package. tar. See references for individual vulnerability details...

9.8CVSS5.5AI score0.00661EPSS
SaveExploits0References17
OSV
OSV
•added 2026/01/30 3:17 p.m.•8 views

CLEANSTART-2026-RQ53330 Within HostnameError

Multiple security vulnerabilities affect the helm package. Within HostnameError. See references for individual vulnerability details...

9.8CVSS5.5AI score0.00661EPSS
SaveExploits2References19
OSV
OSV
•added 2026/01/30 3:17 p.m.•23 views

CLEANSTART-2026-TS12850 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS5.5AI score0.00457EPSS
SaveExploits2References8
OSV
OSV
•added 2026/01/30 3:17 p.m.•21 views

CLEANSTART-2026-RD08428 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS5.6AI score0.00457EPSS
SaveExploits2References5
OSV
OSV
•added 2026/01/30 3:16 p.m.•7 views

CLEANSTART-2026-UU56048 Within HostnameError

Multiple security vulnerabilities affect the helm package. Within HostnameError. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00661EPSS
SaveExploits2References19
OSV
OSV
•added 2026/01/30 3:16 p.m.•5 views

CLEANSTART-2026-LY33846 Within HostnameError

Multiple security vulnerabilities affect the helm package. Within HostnameError. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00661EPSS
SaveExploits2References19
OSV
OSV
•added 2026/01/30 3:13 p.m.•8 views

CLEANSTART-2026-MU17611 tar

Multiple security vulnerabilities affect the helm package. tar. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00661EPSS
SaveExploits0References17
OpenVAS
OpenVAS
•added 2026/01/30 12:00 a.m.•21 views

SUSE: Security Advisory (SUSE-SU-2026:0326-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9AI score
SaveExploits0References3
OpenVAS
OpenVAS
•added 2026/01/30 12:00 a.m.•6 views

openSUSE Security Advisory (SUSE-SU-2026:0326-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/01/30 12:00 a.m.•5 views

SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2026:0326-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0326-1 advisory. This update for helm rebuilds it against the current GO security release. Tenable has extracted the preceding description bloc...

5.9AI score
SaveExploits0References1
SUSE Linux
SUSE Linux
•added 2026/01/28 2:55 p.m.•10 views

Security update for helm

This update for helm rebuilds it against the current GO security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: openSUSE Leap 15.6 zyppe...

5.9AI score
SaveExploits0
OSV
OSV
•added 2026/01/28 2:55 p.m.•10 views

SUSE-SU-2026:0326-1 Security update for helm

This update for helm rebuilds it against the current GO security release...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/28 12:00 a.m.•1 views

PT-2026-27082

This update for helm rebuilds it against the current GO security release...

5.9AI score
SaveExploits0References2
OSV
OSV
•added 2026/01/27 5:25 p.m.•17 views

OPENSUSE-RU-2026:20161-1 Recommended update for hauler

This update for hauler fixes the following issues: Changes in hauler: - Update to version 1.4.1 bsc1256546, CVE-2026-22772: fixed typos for containerd imports 493 fix and support containerd imports of hauls 492 bump github.com/sigstore/fulcio 489 - Update to version 1.4.0: added/updated logging f...

5.8CVSS7.8AI score0.00232EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/01/13 8:29 p.m.•12 views

Arbitrary Command Injection

Overview renovate is a dependency updater. Affected versions of this package are vulnerable to Arbitrary Command Injection due to the improper sanitazation of user-supplied repository in the Chart.yaml file in the helmv3 manager. An attacker can execute arbitrary commands on the host system by...

8.4CVSS7.7AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/01/13 8:29 p.m.•26 views

Renovate vulnerable to arbitrary command injection via helmv3 manager and malicious Chart.yaml file

Summary The user-provided string repository in the helmv3 manager is appended to the helm registry login command without proper sanitization. Details Adversaries can provide a maliciously crafted Chart.yaml in conjunctions with a tweaked Renovate configuration file to trick Renovate to execute...

8.2AI score
SaveExploits0References2Affected Software1
OSV
OSV
•added 2026/01/13 8:29 p.m.•15 views

GHSA-3F44-XW83-3PMG Renovate vulnerable to arbitrary command injection via helmv3 manager and malicious Chart.yaml file

Summary The user-provided string repository in the helmv3 manager is appended to the helm registry login command without proper sanitization. Details Adversaries can provide a maliciously crafted Chart.yaml in conjunctions with a tweaked Renovate configuration file to trick Renovate to execute...

6.7CVSS8.1AI score0.01014EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/13 7:57 p.m.•11 views

EUVD-2026-2097

Renovate vulnerable to arbitrary command injection via kustomize manager and malicious helm repository...

7.1AI score
SaveExploits0References2
Rows per page
Query Builder