CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: kubescape, helm-push, k8sgpt, trivy, zarf, eksctl, cilium-cli, flux-source-controller, flux-helm-controller, zot, k9s, kubevela, chartmuseum, up, helm-operator, kots...

AZL-34583 CVE-2024-25620 affecting package cert-manager for versions less than 1.12.12-2

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

CVE-2024-25620

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

AZL-34355 CVE-2024-25620 affecting package cert-manager for versions less than 1.11.2-12

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

AZL-38023 CVE-2024-25620 affecting package helm for versions less than 3.13.2-3

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

UBUNTU-CVE-2024-25620

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

Directory traversal

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

Helm Path Traversal Vulnerability

Helm is a Kubernetes package manager. A path traversal vulnerability exists in Helm versions prior to 3.14.0, which stems from the presence of path traversal...

CVE-2024-25620

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

CVE-2024-25620

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

CVE-2024-25620 Dependency management path traversal in helm

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

CVE-2024-25620 Dependency management path traversal in helm

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

CVE-2024-25620 Dependency management path traversal in helm

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

CVE-2024-25620

CVE-2024-25620 – Helm path traversal vulnerability : The connected Nessus entry confirms a concrete issue in Helm where saving a chart with a relative path in Chart.yaml can cause the chart to be saved outside its intended directory. This is due to improper validation of user-supplied input, enab...

CVE-2024-25620: Improper Limitation of a Pathname to a Restricted Directory

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

PT-2024-4076

Name of the Vulnerable Software and Affected Versions Helm versions prior to 3.14.1 Description The issue is related to the Helm client or SDK saving a chart outside its expected directory based on changes in the relative path within the Chart.yaml file. This occurs when the chart's name includes...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: loki, aactl, kargo, up, gitsign, docker-machine-driver-harvester, k9s, skaffold, chartmuseum, scorecard, docker-credential-gcr, kots, k8sgpt, cadvisor, zarf, argo-workflows, argo-workflows-fips, skopeo, pulumi, cosign-fips, guac, newrelic-infrastructure-agent, zot,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: loki, aactl, kargo, up, gitsign, docker-machine-driver-harvester, k9s, skaffold, chartmuseum, scorecard, docker-credential-gcr, kots, k8sgpt, cadvisor, zarf, argo-workflows, argo-workflows-fips, skopeo, pulumi, cosign-fips, guac, newrelic-infrastructure-agent, zot,...

CVE-2023-44487 affecting package helm for versions less than 3.14.0-1

CVE-2023-44487 affecting package helm for versions less than 3.14.0-1. An upgraded version of the package is available that resolves this issue...

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: helm-push, melange, fuse-overlayfs-snapshotter, flux-source-controller, skaffold, kots, k8sgpt, gitness, cilium-cli, zot, newrelic-infrastructure-agent, grype, kaniko, eksctl, buildkitd, ctop, helm, kubescape, trivy, flux-helm-controller, kubevela, k3d, up...