EUVD-2021-1119

Malware in sbrugna...

Content Spoofing

github.com/helm/helm is vulnerable to content spoofing. Improper sanitization of the alias field on a Chart.yaml allows an attacker to inject arbitrary information in a chart...

CVE-2020-15185

In Helm before versions 2.16.11 and 3.3.2, a Helm repository can contain duplicates of the same chart, with the last one always used. If a repository is compromised, this lowers the level of access that an attacker needs to inject a bad chart into a repository. To perform this attack, an attacker...