CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: eksctl, k8sgpt, chart-testing, linkerd2, flux-source-controller, kubescape, helm-docs, trivy, chartmuseum, flux, flux-helm-controller, pluto, rancher-fleet, helm-operator, zarf, istio, helm-push, cluster-api-helm-controller, cert-manager-cmctl, k9s, cilium-cli, cerbo...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: eksctl, k8sgpt, chart-testing, linkerd2, flux-source-controller, kubescape, helm-docs, trivy, chartmuseum, flux, flux-helm-controller, pluto, rancher-fleet, helm-operator, zarf, istio, helm-push, cluster-api-helm-controller, cert-manager-cmctl, k9s, cilium-cli, cerbo...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: k8sgpt, kubescape, chezmoi, aws-eks-pod-identity-agent, xeol, opentelemetry-collector-contrib, opentelemetry-operator, fulcio, pulumi, git-sync, weaviate, kyverno-notation-aws, secrets-store-csi-driver-provider-azure, boring-registry, terraform, grafana-mimir, flyte,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: eksctl, grype, k8sgpt, linkerd2, spegel, syft, flux-source-controller, kubescape, melange, docker, xeol, trivy, wolfictl, chartmuseum, osv-scanner, flux-helm-controller, opa-envoy, rancher-fleet, helm-operator, opa, fuse-overlayfs-snapshotter, zarf, ctop, dagger,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: kustomize, regclient, k8sgpt, glow, prometheus-operator, kubernetes-csi-external-resizer, git-sync, http-echo, linkerd2-proxy-init, trust-manager, kubernetes-release, terraform, ctop, gostatsd, conftest, dive, kind, yq, cadvisor, sqlexporter, splunk-otel-collector,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, conftest, paranoia, kind, oauth2-proxy, gotenberg, mc, chartmuseum, k9s, flux-source-controller, git-lfs, spqr, falcosidekick, redka, croc, kubernetes-csi-driver-hostpath, melange, jitsucom-bulker, wait-for-port, cri-tools, crane, dive,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: eksctl, kubescape, kubevela, zot, flux-helm-controller, helm-operator, kots, chartmuseum, k9s, flux-source-controller, k8sgpt, trivy, up, zarf, cilium-cli, helm-push...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: eksctl, flux-helm-controller, helm-operator, k8sgpt, kubevela, flux-source-controller, kubescape, zot, k9s, kots, cilium-cli, trivy, zarf, chartmuseum, helm-push, up...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: eksctl, kubescape, kubevela, zot, flux-helm-controller, helm-operator, kots, chartmuseum, k9s, flux-source-controller, k8sgpt, trivy, up, zarf, cilium-cli, helm-push...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: bom, kubescape, k3d, falcoctl-fips, paranoia, spire-server-fips, tekton-chains, chartmuseum, up, scorecard, ctop, slsa-verifier, k3s, skaffold, kpt, aactl...

SUSE CVE-2019-1000009

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...

CVE-2019-1000009

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...

Path traversal

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...

CVE-2019-1000009

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...

CVE-2019-1000009

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...

CVE-2019-1000009

Helm ChartMuseum versions >=0.1.0 and

CVE-2019-1000009: Improper Limitation of a Pathname to a Restricted Directory

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...