Denial Of Service (DoS)

helm.sh/helm/v3 is vulnerable to Denial Of Service DoS. The vulnerability is due to memory exhaustion due to specially crafted chart archives that decompress to a size significantly larger than their compressed form...

GO-2025-3601 Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination in helm.sh/helm

Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination in helm.sh/helm...

GO-2025-3602 Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow in helm.sh/helm

Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow in helm.sh/helm...

AZL-60145 CVE-2025-32386 affecting package cert-manager for versions less than 1.11.2-23

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...

CVE-2025-32386 Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...

CVE-2025-32386

CVE-2025-32386: Helm memory exhaustion via crafted chart archives. A chart can expand uncompressed >800x, triggering memory exhaustion when loaded. Helm fixed in v3.17.3. IBM/Kubecost and related records reference Helm usage and confirm the vulnerability details and mitigation path (upgrade He...

CVE-2025-32387

CVE-2025-32387 (Helm) involves a JSON Schema in a chart that can be crafted with deeply nested references, triggering recursive parsing and a stack overflow. Connected IBM bulletin corroborates the Helm issue and notes the fix in Helm v3.17.3; remediation is to upgrade to Helm v3.17.3 or later. T...

CVE-2025-32387 Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow

Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be crafted with a deeply nested chain of references, leading to parser recursion that can exceed the stack size limit and trigger a stack overflow. This issue has been resolved in Helm v3.17.3...

CVE-2025-32387 Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow

Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be crafted with a deeply nested chain of references, leading to parser recursion that can exceed the stack size limit and trigger a stack overflow. This issue has been resolved in Helm v3.17.3...

Helm 安全漏洞

Helm is a Kubernetes package manager from the CNCF Foundation. Helm has a security vulnerability that stems from a specially crafted JSON Schema file that could lead to a stack overflow...

Azure Linux 3.0 Security Update: cert-manager / helm (CVE-2024-25620)

The version of cert-manager / helm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-25620 advisory. - Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources...

CVE-2024-45338 affecting package helm for versions less than 3.15.2-2

CVE-2024-45338 affecting package helm for versions less than 3.15.2-2. A patched version of the package is available...

AZL-54534 CVE-2024-45338 affecting package helm for versions less than 3.14.2-5

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

Path Traversal

helm.sh/helm is vulnerable to Path Traversal. The vulnerability is due to improper validation of file paths in chart archives, which allows files to be extracted outside the target directory when unpacking...

Helm Security Vulnerabilities

Helm is a Kubernetes package manager. A security vulnerability exists in Helm 3.13.3 and earlier versions, which stems from displaying confidential information with the --dry-run option in plaintext...

UBUNTU-CVE-2024-26147

Helm is a package manager for Charts for Kubernetes. Versions prior to 3.14.2 contain an uninitialized variable vulnerability when Helm parses index and plugin yaml files missing expected content. When either an index.yaml file or a plugins plugin.yaml file were missing all metadata a panic would...

AZL-38023 CVE-2024-25620 affecting package helm for versions less than 3.13.2-3

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

CVE-2024-25620

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

AZL-34799 CVE-2023-44487 affecting package helm for versions less than 3.15.2-1

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

PT-2023-36210 · Hashicorp · Terraform-Provider-Helm

Name of the Vulnerable Software and Affected Versions: terraform-provider-helm affected versions not specified Description: The issue is related to a security concern addressed by rebuilding the package with the go 1.20 security release. Recommendations: At the moment, there is no information abo...