GO-2025-3887 Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion in helm.sh/helm

Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion in helm.sh/helm...

BIT-HELM-2025-55199 Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory OOM termination. This issue has been resolved in Helm 3.18.5. A workaround involves...

BIT-HELM-2025-55198 Helm May Panic Due To Incorrect YAML Content

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, when parsing Chart.yaml and index.yaml files, an improper validation of type error can lead to a panic. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring YAML files are formatted as Helm expect...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: trivy-operator, istio, kubescape, nova, headlamp, cilium-cli, helm-set-status, tw, envoy-gateway, k8ssandra-client, chartmuseum, chart-testing, helm-operator, linkerd2, flux-source-controller, zot, cluster-api-helm-controller, helm-mapkubeapis, k9s, kargo,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: trivy-operator, istio, kubescape, nova, headlamp, cilium-cli, helm-set-status, envoy-gateway, k8ssandra-client, chartmuseum, chart-testing, helm-operator, linkerd2, flux-source-controller, zot, cluster-api-helm-controller, helm-mapkubeapis, k9s, kargo,...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: trivy-operator, istio, kubescape, nova, headlamp, cilium-cli, helm-set-status, envoy-gateway, k8ssandra-client, chartmuseum, chart-testing, helm-operator, linkerd2, flux-source-controller, zot, cluster-api-helm-controller, helm-mapkubeapis, k9s, kargo,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: trivy-operator, istio, kubescape, nova, headlamp, cilium-cli, helm-set-status, tw, envoy-gateway, k8ssandra-client, chartmuseum, chart-testing, helm-operator, linkerd2, flux-source-controller, zot, cluster-api-helm-controller, helm-mapkubeapis, k9s, kargo,...

SUSE CVE-2025-55198

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, when parsing Chart.yaml and index.yaml files, an improper validation of type error can lead to a panic. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring YAML files are formatted as Helm expect...

SUSE CVE-2025-55199

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory OOM termination. This issue has been resolved in Helm 3.18.5. A workaround involves...

Malicious code in @marcos_feitoza/devops-helm (npm)

The package @marcosfeitoza/devops-helm was found to contain malicious code...

MAL-2025-9091 Malicious code in @marcos_feitoza/devops-helm (npm)

The package @marcosfeitoza/devops-helm was found to contain malicious code...

CVE-2025-55198

A flaw was found in helm.sh/helm/v3. Improper validation of type errors during parsing of Chart.yaml and index.yaml files can trigger a panic. A remote attacker, requiring user interaction, can trigger this panic via a malformed chart file. This can lead to an application level denial of service...

Security update for helm

This update for helm fixes the following issues: Update to version 3.18.4 bsc1246152, CVE-2025-53547: Disabling linter due to unknown issue f20a4ad Matt Farina builddeps: bump the k8s-io group with 7 updates 563b094 dependabotbot Updating link handling 00de613 Matt Farina Patch Instructions: To...

SUSE-SU-2025:20595-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.18.4 bsc1246152, CVE-2025-53547: Disabling linter due to unknown issue f20a4ad Matt Farina builddeps: bump the k8s-io group with 7 updates 563b094 dependabotbot Updating link handling 00de613 Matt Farina...

CVE-2025-55199

A flaw was found in helm.sh/helm/v3. A maliciously crafted JSON Schema file can trigger excessive memory consumption during Helm Chart validation, leading to an out-of-memory OOM termination. A remote attacker, requiring user interaction to provide the crafted file, can trigger this condition. Th...

AZL-66318 CVE-2025-55199 affecting package helm 3.14.2-10

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory OOM termination. This issue has been resolved in Helm 3.18.5. A workaround involves...

CVE-2025-55199

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory OOM termination. This issue has been resolved in Helm 3.18.5. A workaround involves...

CVE-2025-55199

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory OOM termination. This issue has been resolved in Helm 3.18.5. A workaround involves...

CVE-2025-55198

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, when parsing Chart.yaml and index.yaml files, an improper validation of type error can lead to a panic. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring YAML files are formatted as Helm expect...

CVE-2025-55198

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, when parsing Chart.yaml and index.yaml files, an improper validation of type error can lead to a panic. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring YAML files are formatted as Helm expect...