85 matches found
CVE-2025-32386 vulnerabilities
Vulnerabilities for packages: helm-operator, kubescape, consul-k8s-fips, kuma, flux, k8ssandra-client, flux-helm-controller, cert-manager-cmctl, helm-operator-fips, helm-docs, trivy, cilium-cli, flux-helm-controller-fips, eksctl, cluster-api-helm-controller-fips, tw, consul-k8s, chart-testing,...
GHSA-265R-HFXG-FHMG vulnerabilities
Vulnerabilities for packages: zot, helm, opa, cilium-cli, xeol, kargo, helm-operator, kaniko, ctop, flux-helm-controller, neuvector-scanner, envoy-gateway, cert-manager-cmctl, kots, docker-cli-buildx, helm-push, chartmuseum, nerdctl, dagger, cluster-api-helm-controller, rancher-fleet, trivy, k3s,...
CVE-2022-36049
Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...
BIT-HELM-2022-36049 Flux2 Helm Controller denial of service
Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...
GHSA-R53H-JV2G-VPX6 vulnerabilities
Vulnerabilities for packages: kubevela, zot, helm-operator, flux-source-controller, k9s, kubescape, eksctl, chartmuseum, k8sgpt, up, zarf, flux-helm-controller, helm-push, trivy, kots, cilium-cli...
GHSA-V53G-5GJP-272R vulnerabilities
Vulnerabilities for packages: kubevela, zot, up, helm-push, cilium-cli, chartmuseum, k9s, eksctl, trivy, flux-source-controller, helm-operator, k8sgpt, zarf, flux-helm-controller, kubescape, kots...
CVE-2024-25620 vulnerabilities
Vulnerabilities for packages: kubevela, zot, helm-operator, flux-source-controller, k9s, kubescape, eksctl, chartmuseum, k8sgpt, up, zarf, flux-helm-controller, helm-push, trivy, kots, cilium-cli...
GHSA-XW73-RW38-6VJC vulnerabilities
Vulnerabilities for packages: cadvisor-fips, bom, helm-operator, docker-credential-gcr, buildkitd, crane, kubescape, k3s, ko-fips, rancher-machine, flux, nerdctl, flux-helm-controller, policy-controller, helm-operator-fips, cadvisor, tekton-chains, trivy, kubevela, helm, ctop, loki, dagger, eksct...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: cadvisor-fips, bom, helm-operator, docker-credential-gcr, buildkitd, crane, kubescape, k3s, ko-fips, rancher-machine, flux, nerdctl, flux-helm-controller, policy-controller, helm-operator-fips, cadvisor, tekton-chains, trivy, kubevela, helm, ctop, loki, dagger, eksct...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: plutono-fips, aws-efs-csi-driver-fips, kubeflow, buildkitd, kubescape, terraform-provider-sendgrid, vault-csi-provider, prometheus-blackbox-exporter, bank-vaults-fips, kubevela, prometheus-adapter-fips, kubernetes-csi-livenessprobe-fips, kiam, kube-oidc-proxy,...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: kubevela, aactl, up, cortex, k3d, spark-operator, slsa-verifier, scorecard, buildkitd, dgraph, kubeflow, src, terraform-provider-sendgrid, kubescape...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: cortex, git-lfs, gitness, gobuster, kubeflow, k3d, ollama, pulumi, dgraph, secrets-store-csi-driver-provider-gcp, secrets-store-csi-driver, atlantis, gke-gcloud-auth-plugin, buildkitd, skaffold, newrelic-infrastructure-agent, terraform-provider-azurerm, hey, nats,...
CVE-2023-2253 vulnerabilities
Vulnerabilities for packages: bom, kubernetes-dashboard, argocd-image-updater-fips, argocd-image-updater, kpt, aactl...
GHSA-HQXW-F8MX-CPMW vulnerabilities
Vulnerabilities for packages: bom, kubernetes-dashboard, argocd-image-updater-fips, argocd-image-updater, kpt, aactl...
CVE-2023-28841 vulnerabilities
Vulnerabilities for packages: bom, helm, ctop, apko, melange, up, ko...
GHSA-232P-VWFF-86MP vulnerabilities
Vulnerabilities for packages: bom, helm, ctop, apko, melange, up, ko...
GHSA-33PG-M6JH-5237 vulnerabilities
Vulnerabilities for packages: bom, helm, ctop, apko, melange, up, ko...
GHSA-6WRF-MXFJ-PF5P vulnerabilities
Vulnerabilities for packages: bom, helm, ctop, apko, melange, up, ko...
CBL Mariner 2.0 Security Update: helm (CVE-2022-36049)
The version of helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-36049 advisory. - Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-...