Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/13 5:40 a.m.3 views

BIT-HELM-2026-35206 Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment

Helm is a package manager for Charts for Kubernetes. In Helm versions =3.20.1 and =4.1.3, a specially crafted Chart will cause helm pull --untar chart URL | repo/chartname to write the Chart's contents to the immediate output directory as defaulted to the current working directory; or as given by...

4.8CVSS5.8AI score0.00199EPSS
SaveExploits0References4
Rows per page
Query Builder