Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the LoadArchiveFiles function in archive.go. An attacker can disrupt service by supplying an archive whose decompressed size is very large. Remediation A fix was pushed into the...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the LoadArchiveFiles function in archive.go. An attacker can disrupt service by supplying an archive whose decompressed size is very large. Remediation Upgrade...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the LoadArchiveFiles function in archive.go. An attacker can disrupt service by supplying an archive whose decompressed size is very large. Remediation Upgrade...

Helm 安全漏洞

Helm is a Kubernetes package manager from the CNCF Foundation. Helm has a security vulnerability that stems from a specially crafted JSON Schema file that could lead to a stack overflow...

PT-2025-15872

Name of the Vulnerable Software and Affected Versions: Helm versions prior to 3.17.3 Description: A specially crafted chart archive file can cause Helm to exhaust its memory, leading to an out-of-memory termination. This occurs when the file expands to be significantly larger uncompressed than...

PT-2025-15873

Name of the Vulnerable Software and Affected Versions: Helm versions prior to 3.17.3 Description: A JSON Schema file within a chart can be crafted with a deeply nested chain of references, leading to parser recursion that can exceed the stack size limit and trigger a stack overflow. This issue wa...

Helm 安全漏洞

Helm is a Kubernetes package manager from the CNCF Foundation. Helm has a security vulnerability that stems from a specially crafted chart file that could lead to memory exhaustion...

openSUSE Security Advisory (SUSE-SU-2025:1007-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2025:1007-1 Security update for helm

This update for helm fixes the following issues: - CVE-2025-22870: Fixed proxy bypass using IPv6 zone IDs bsc1238688. Other fixes: - Updated to version 3.17.2 - Updated to 0.37.0 for x/net...

CVE-2024-40635 vulnerabilities

Vulnerabilities for packages: chartmuseum, helm-operator, eksctl, wolfictl, zot, spegel, syft, k3s, k8sgpt, fuse-overlayfs-snapshotter, kubescape, envoy-gateway, melange, docker-compose, grype, newrelic-infrastructure-agent, k8ssandra-client, trivy, kubevela, neuvector-scanner, cilium-cli, kaniko...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: chartmuseum, helm-operator, eksctl, wolfictl, zot, spegel, syft, k3s, k8sgpt, fuse-overlayfs-snapshotter, kubescape, envoy-gateway, melange, docker-compose, grype, newrelic-infrastructure-agent, k8ssandra-client, trivy, kubevela, neuvector-scanner, cilium-cli, kaniko...

helm-3.17.2-1.1 on GA media (moderate)

helm-3.17.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:14906-1 Rating: moderate Cross-References: CVE-2025-22870 CVSS scores: CVE-2025-22870 SUSE : 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L CVE-2025-22870 SUSE : 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N...

OPENSUSE-SU-2025:14906-1 helm-3.17.2-1.1 on GA media

These are all security issues fixed in the helm-3.17.2-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter, k8sgpt-operator, aws-load-balancer-controller, pulumi-language-yaml, nri-kafka, govulncheck, haproxy-ingress, aws-flb-kinesis, mage, docker-cli, litefs, kuberay-operator, yam, grype, nri-elasticsearch, nri-mssql, src,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, postgres-operator, govulncheck, kuberay-operator, gptscript, newrelic-fluent-bit-output, kubernetes-event-exporter, volume-modifier-for-k8s, gitsign, kor, amazon-k8s-cni, kubernetes-dashboard-metrics-scraper, mods,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: dex-k8s-authenticator, actions-runner-controller, stakater-reloader, prometheus-stackdriver-exporter, golangci-lint, supercronic, kube-state-metrics-fips, tflint, karpenter-fips, kube-vip-fips, etcd-fips, caddy, gosu, hivemind, neuvector-dbgen-fips, gomplate,...

openSUSE Security Advisory (SUSE-SU-2024:1137-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:0602-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:0602-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2025:0602-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0602-1 advisory. Update to version 3.17.1: - CVE-2024-45338: Fixed denial of service due to non-linear parsing of case-insensitive...