1302 matches found
GHSA-557J-XG8C-Q2MM vulnerabilities
Vulnerabilities for packages: trivy, flux-helm-controller-fips, kargo, flux-fips, k8ssandra-client-fips, eksctl, k8ssandra-client, envoy-gateway, trivy-operator-fips, zot, helm-docs, chart-testing, zarf, flux, cerbos, linkerd2, trivy-fips, helm-push, chart-testing-fips, chartmuseum-fips,...
Local Code Execution (LCE)
helm.sh/helm/v3 is vulnerable to Local Code Execution LCE. The vulnerability is due to insufficient validation and sanitization of the Chart.yaml and Chart.lock files during dependency updates, allowing a maliciously crafted file to trigger local code execution...
CVE-2025-53547
Helm is a package manager for Charts for Kubernetes. Prior to 3.18.4, a specially crafted Chart.yaml file along with a specially linked Chart.lock file can lead to local code execution when dependencies are updated. Fields in a Chart.yaml file, that are carried over to a Chart.lock file when...
Helm 代码注入漏洞
Helm is a Kubernetes package manager from the CNCF Foundation. A code injection vulnerability exists in Helm versions prior to 3.18.4 that stems from specially crafted Chart.yaml and Chart.lock files that could lead to native code execution...
The vulnerability of the data visualization plugin in the Grafana XY Chart Plugin system arises from the lack of security measures taken to protect the structure of the web page. This allows attackers to execute DOM-based XSS attacks.
The vulnerability of the data visualization plugin in the Grafana XY Chart Plugin exists due to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute a DOM-based XSS attack remotely...
MAL-2025-5134 Malicious code in solana-chart (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in solana-chart (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Security update for helm-mirror
This update for helm-mirror fixes the following issues: CVE-2025-32386: Fixed denial of service due to memory exhaustion after loading a specially crafter chart bsc1241028 CVE-2025-32387: Fixed stack overflow due to parser recursion that can exceed the stack size limit bsc1241031 Patch...
Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination
...
CVE-2024-52599
Tuleap is an open source suite to improve management of software developments and collaboration. In Tuleap Community Edition prior to version 16.1.99.50 and Tuleap Enterprise Edition prior to versions 16.1-4 and 16.0-7, a malicious user with the ability to create an artifact in a tracker with a...
CVE-2024-52799
Argo Workflows Chart is used to set up argo and its needed dependencies through one command. Prior to 0.44.0, the workflow-role has excessive privileges, the worst being create pods/exec, which will allow kubectl exec into any Pod in the same namespace, i.e. arbitrary code execution within those...
CVE-2024-3674
The Inline Google Spreadsheet Viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gdoc' shortcode in all versions up to, and including, 0.13.2 due to insufficient input sanitization and output escaping on user supplied attributes such as 'chartresolution'...
CVE-2024-40060
go-chart v2.1.1 was discovered to contain an infinite loop via the drawCanvas function...
CVE-2023-47526
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chart Builder Team Chartify – WordPress Chart Plugin allows Stored XSS.This issue affects Chartify – WordPress Chart Plugin: from n/a through 2.0.6...
CVE-2023-23892
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Jamie Poitra M Chart plugin = 1.9.4 versions...
CVE-2023-24387
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPdevart Organization chart plugin = 1.4.4 versions...
CVE-2023-24384
Cross-Site Request Forgery CSRF vulnerability in WpDevArt Organization chart = 1.4.4 versions...
CVE-2023-48778
Cross-Site Request Forgery CSRF vulnerability in VillaTheme Product Size Chart For WooCommerce.This issue affects Product Size Chart For WooCommerce: from n/a through 1.1.5...