87 matches found
CVE-2025-32386 vulnerabilities
Vulnerabilities for packages: consul-k8s, harbor-fips, k8ssandra-client, k9s, flux-fips, cert-manager-cmctl-fips, helm-docs, zarf, eksctl, cilium-cli, helm-push, flux, trivy-fips, kuma, cluster-api-helm-controller, consul-k8s-fips, flux-helm-controller, cert-manager-cmctl,...
GHSA-265R-HFXG-FHMG vulnerabilities
Vulnerabilities for packages: envoy-gateway, k8sgpt, ctop, flux-helm-controller, cilium-cli, kaniko, melange, fuse-overlayfs-snapshotter, zot, skaffold, kargo, trivy, kubevela, zarf, neuvector-scanner, docker-compose, syft, opa-envoy, newrelic-infrastructure-agent, cert-manager-cmctl, buildkitd,...
CVE-2022-36049
Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...
BIT-HELM-2022-36049 Flux2 Helm Controller denial of service
Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...
GHSA-R53H-JV2G-VPX6 vulnerabilities
Vulnerabilities for packages: helm-push, trivy, kubevela, chartmuseum, kots, k9s, kubescape, zarf, flux-source-controller, k8sgpt, zot, eksctl, flux-helm-controller, cilium-cli, up, helm-operator...
GHSA-V53G-5GJP-272R vulnerabilities
Vulnerabilities for packages: flux-source-controller, helm-push, trivy, k8sgpt, kubevela, zarf, chartmuseum, up, flux-helm-controller, cilium-cli, helm-operator, k9s, kubescape, zot, eksctl, kots...
CVE-2024-25620 vulnerabilities
Vulnerabilities for packages: helm-push, trivy, kubevela, chartmuseum, kots, k9s, kubescape, zarf, flux-source-controller, k8sgpt, zot, eksctl, flux-helm-controller, cilium-cli, up, helm-operator...
GHSA-XW73-RW38-6VJC vulnerabilities
Vulnerabilities for packages: docker-credential-gcr, goreleaser, buildkitd, dagger, k9s, newrelic-infrastructure-agent, zarf, cosign-fips, k3d, argo-workflows-fips, eksctl, helm-fips, gitsign, k8sgpt, ctop, falcoctl, kpt, aactl, argo-workflows, skaffold, falcoctl-fips, pulumi, flux, guac,...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: docker-credential-gcr, goreleaser, buildkitd, dagger, k9s, newrelic-infrastructure-agent, zarf, cosign-fips, k3d, argo-workflows-fips, eksctl, helm-fips, gitsign, k8sgpt, ctop, falcoctl, kpt, aactl, argo-workflows, skaffold, falcoctl-fips, pulumi, flux, guac,...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: vault-csi-provider, prometheus-adapter-fips, buildkitd, volume-modifier-for-k8s-fips, k3d, dynamic-localpv-provisioner-fips, kube-oidc-proxy, terraform-provider-sendgrid, kubeflow-fips, aactl, prometheus-stackdriver-exporter, falcoctl-fips, kiam, slsa-verifier, up,...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: cortex, kubevela, spark-operator, src, up, buildkitd, slsa-verifier, k3d, scorecard, aactl, kubescape, dgraph, terraform-provider-sendgrid, kubeflow...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: atlantis, kubeflow-katib, ollama, bom, gomplate, prometheus-adapter, pulumi-kubernetes-operator, gitness, hugo, helm, kots, kaf, grype, pulumi-language-java, pulumi-language-dotnet, k3d, aactl, nghttp2, grpcurl, flux-notification-controller, nodetaint, terraform,...
CVE-2023-2253 vulnerabilities
Vulnerabilities for packages: aactl, kubernetes-dashboard, argocd-image-updater-fips, argocd-image-updater, bom, kpt...
GHSA-HQXW-F8MX-CPMW vulnerabilities
Vulnerabilities for packages: aactl, kubernetes-dashboard, argocd-image-updater-fips, argocd-image-updater, bom, kpt...
CVE-2023-28841 vulnerabilities
Vulnerabilities for packages: apko, melange, helm, up, bom, ko, ctop...
GHSA-232P-VWFF-86MP vulnerabilities
Vulnerabilities for packages: apko, melange, helm, up, bom, ko, ctop...
GHSA-33PG-M6JH-5237 vulnerabilities
Vulnerabilities for packages: apko, melange, helm, up, bom, ko, ctop...
GHSA-6WRF-MXFJ-PF5P vulnerabilities
Vulnerabilities for packages: apko, melange, helm, up, bom, ko, ctop...
CBL Mariner 2.0 Security Update: helm (CVE-2022-36049)
The version of helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-36049 advisory. - Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-...