Lucene search
+L

1943 matches found

OSV
OSV
•added 2026/01/30 3:22 p.m.•14 views

CLEANSTART-2026-GS02052 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00661EPSS
SaveExploits2References21
OSV
OSV
•added 2026/01/30 3:18 p.m.•25 views

CLEANSTART-2026-NS41924 Within HostnameError

Multiple security vulnerabilities affect the helm-operator package. Within HostnameError. See references for individual vulnerability details...

9.8CVSS7.3AI score0.00661EPSS
SaveExploits2References19
OSV
OSV
•added 2026/01/30 3:18 p.m.•7 views

CLEANSTART-2026-CY03855 tar

Multiple security vulnerabilities affect the helm package. tar. See references for individual vulnerability details...

9.8CVSS5.5AI score0.00661EPSS
SaveExploits0References17
OSV
OSV
•added 2026/01/30 3:17 p.m.•8 views

CLEANSTART-2026-RQ53330 Within HostnameError

Multiple security vulnerabilities affect the helm package. Within HostnameError. See references for individual vulnerability details...

9.8CVSS5.5AI score0.00661EPSS
SaveExploits2References19
OSV
OSV
•added 2026/01/30 3:17 p.m.•23 views

CLEANSTART-2026-TS12850 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS5.5AI score0.00457EPSS
SaveExploits2References8
OSV
OSV
•added 2026/01/30 3:17 p.m.•21 views

CLEANSTART-2026-RD08428 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS5.6AI score0.00457EPSS
SaveExploits2References5
OSV
OSV
•added 2026/01/30 3:16 p.m.•7 views

CLEANSTART-2026-UU56048 Within HostnameError

Multiple security vulnerabilities affect the helm package. Within HostnameError. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00661EPSS
SaveExploits2References19
OSV
OSV
•added 2026/01/30 3:16 p.m.•5 views

CLEANSTART-2026-LY33846 Within HostnameError

Multiple security vulnerabilities affect the helm package. Within HostnameError. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00661EPSS
SaveExploits2References19
OSV
OSV
•added 2026/01/30 3:13 p.m.•8 views

CLEANSTART-2026-MU17611 tar

Multiple security vulnerabilities affect the helm package. tar. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00661EPSS
SaveExploits0References17
Tenable Nessus
Tenable Nessus
•added 2026/01/30 12:00 a.m.•5 views

SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2026:0326-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0326-1 advisory. This update for helm rebuilds it against the current GO security release. Tenable has extracted the preceding description bloc...

5.9AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2026/01/30 12:00 a.m.•21 views

SUSE: Security Advisory (SUSE-SU-2026:0326-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9AI score
SaveExploits0References3
OpenVAS
OpenVAS
•added 2026/01/30 12:00 a.m.•6 views

openSUSE Security Advisory (SUSE-SU-2026:0326-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9AI score
SaveExploits0References3
SUSE Linux
SUSE Linux
•added 2026/01/28 2:55 p.m.•10 views

Security update for helm

This update for helm rebuilds it against the current GO security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: openSUSE Leap 15.6 zyppe...

5.9AI score
SaveExploits0
OSV
OSV
•added 2026/01/28 2:55 p.m.•10 views

SUSE-SU-2026:0326-1 Security update for helm

This update for helm rebuilds it against the current GO security release...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/28 12:00 a.m.•2 views

PT-2026-27082

This update for helm rebuilds it against the current GO security release...

5.9AI score
SaveExploits0References2
OSV
OSV
•added 2026/01/27 5:25 p.m.•17 views

OPENSUSE-RU-2026:20161-1 Recommended update for hauler

This update for hauler fixes the following issues: Changes in hauler: - Update to version 1.4.1 bsc1256546, CVE-2026-22772: fixed typos for containerd imports 493 fix and support containerd imports of hauls 492 bump github.com/sigstore/fulcio 489 - Update to version 1.4.0: added/updated logging f...

5.8CVSS7.8AI score0.00232EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/01/13 8:29 p.m.•12 views

Arbitrary Command Injection

Overview renovate is a dependency updater. Affected versions of this package are vulnerable to Arbitrary Command Injection due to the improper sanitazation of user-supplied repository in the Chart.yaml file in the helmv3 manager. An attacker can execute arbitrary commands on the host system by...

8.4CVSS7.7AI score
SaveExploits0References2
OSV
OSV
•added 2026/01/13 8:29 p.m.•15 views

GHSA-3F44-XW83-3PMG Renovate vulnerable to arbitrary command injection via helmv3 manager and malicious Chart.yaml file

Summary The user-provided string repository in the helmv3 manager is appended to the helm registry login command without proper sanitization. Details Adversaries can provide a maliciously crafted Chart.yaml in conjunctions with a tweaked Renovate configuration file to trick Renovate to execute...

6.7CVSS8.1AI score0.01014EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/01/13 8:29 p.m.•26 views

Renovate vulnerable to arbitrary command injection via helmv3 manager and malicious Chart.yaml file

Summary The user-provided string repository in the helmv3 manager is appended to the helm registry login command without proper sanitization. Details Adversaries can provide a maliciously crafted Chart.yaml in conjunctions with a tweaked Renovate configuration file to trick Renovate to execute...

8.2AI score
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/01/13 7:57 p.m.•11 views

EUVD-2026-2097

Renovate vulnerable to arbitrary command injection via kustomize manager and malicious helm repository...

7.1AI score
SaveExploits0References2
Rows per page
Query Builder