PT-2026-55201

Name of the Vulnerable Software and Affected Versions SUSE Rancher Fleet versions prior to 0.15.2 SUSE Rancher Fleet versions prior to 0.14.6 SUSE Rancher Fleet versions prior to 0.13.11 SUSE Rancher Fleet versions prior to 0.12.15 Description Missing validation of valuesFrom references in the He...

PT-2026-54762

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 0.12.15 Fleet versions prior to 0.13.11 Fleet versions prior to 0.14.6 Fleet versions prior to 0.15.2 Description Fleet forwards Helm authentication credentials BasicAuth to any URL specified in the helm.repo field of a...

SUSE-SU-2026:22455-1 Security update for helm

This update for helm fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266598. Changes for helm: - update to 3.21.2: choredeps: bump the k8s-io group with 2 updates...

Security update for helm (important)

openSUSE security update: security update for helm ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20994-1 Rating: important References: bsc1266598 Cross-References: CVE-2026-39821 CVSS scores: CVE-2026-39821 SUSE : 7.4...

mcp-pinot: Unauthenticated tool invocation via default oauth_enabled=False + host 0.0.0.0 bind

ResolutionFixed in v3.1.0, released 2026-05-25. The fix was merged in PR 95 at commit 1c7d3f9. The fix changes the default HTTP bind host to 127.0.0.1, refuses non-loopback HTTP/HTTPS exposure unless OAuth is enabled, makes Helm exposure opt-in and OAuth-gated, and adds parser-backed...

SUSE-SU-2026:22432-1 Security update for helm

This update for helm fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266598. Changes for helm: - update to 3.21.2: choredeps: bump the k8s-io group with 2 updates...

PT-2026-53492

Resolution Fixed in v3.1.0, released 2026-05-25. The fix was merged in PR 95 at commit 1c7d3f9. The fix changes the default HTTP bind host to 127.0.0.1, refuses non-loopback HTTP/HTTPS exposure unless OAuth is enabled, makes Helm exposure opt-in and OAuth-gated, and adds parser-backed...

SUSE CVE-2026-54448

Trivy is a security scanner. Prior to 0.71.0, when Trivy scans a Helm chart archive .tgz, its custom tar unpacker reads each entry with io.ReadAlltr and no size limit. An attacker who can place a malicious .tgz file in the scanned path can craft a small compressed archive that decompresses to...

GHSA-73CV-556C-W3G6 mcp-pinot: Unauthenticated tool invocation via default oauth_enabled=False + host 0.0.0.0 bind

Resolution Fixed in v3.1.0, released 2026-05-25. The fix was merged in PR 95 at commit 1c7d3f9. The fix changes the default HTTP bind host to 127.0.0.1, refuses non-loopback HTTP/HTTPS exposure unless OAuth is enabled, makes Helm exposure opt-in and OAuth-gated, and adds parser-backed...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, trivy-operator, loki, nerdctl, cilium-cli, kube-arangodb-fips, telegraf, k9s-fips, flux-fips, knative-eventing-fips, skaffold, helm, argo-cd, gitlab-rails-ce, tekton-pipelines-fips, kubescape-server, trivy, opentofu, zot, gitea,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: kubescape, act, cilium-cli, witness, flux-source-controller, spire-server, flux-notification-controller, kots, eksctl, caddy, snyk-cli, wolfictl, flux-image-automation-controller, guac, external-secrets-operator, melange, pulumi-language-yaml, steampipe,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: cilium, kubescape, k9s, telegraf, cilium-cli, flux-source-controller, k3s, spire-server, skaffold, trivy-operator, kots, helm, zarf, kubernetes-dashboard, flux, prometheus, snyk-cli, cloud-provider-aws, loki, osv-scanner, istio, prometheus-operator, containerd,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: cilium, kubescape, k9s, telegraf, cilium-cli, docker-machine-driver-harvester, flux-source-controller, k3s, spire-server, skaffold, trivy-operator, kots, helm, zarf, kubernetes-dashboard, flux, prometheus, snyk-cli, cloud-provider-aws, loki, osv-scanner, istio,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: kubescape, act, cilium-cli, witness, flux-source-controller, spire-server, kots, caddy, snyk-cli, wolfictl, flux-image-automation-controller, guac, external-secrets-operator, melange, pulumi-language-yaml, falco-no-driver, aactl, kaf, argo-cd, zot, gitlab-kas,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: cilium, terragrunt, kubescape, k9s, telegraf, act, cilium-cli, witness, flux-source-controller, k3s, spire-server, skaffold, trivy-operator, kots, helm, dagger, zarf, kubernetes-dashboard, opentofu, flux, pulumi-language-dotnet, prometheus, snyk-cli, scorecard,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: cilium, telegraf, cilium-cli, spire-server, k3s, docker-cli-buildx, kots, helm, kubernetes-dashboard, flux, prometheus, snyk-cli, cloud-provider-aws, loki, podman, istio, prometheus-operator, containerd, external-dns, external-secrets-operator, nerdctl, fscrypt,...

GO-2026-5207 Fleet: Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering in github.com/rancher/fleet

Fleet: Helm impersonation bypass of RESTClientGetter retains cluster-admin during template rendering in github.com/rancher/fleet...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the parser process. An attacker can cause excessive memory consumption by submitting a specially crafted Helm chart archive that decompresses to a very large size. Remediation...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the parser process. An attacker can cause excessive memory consumption by submitting a specially crafted Helm chart archive that decompresses to a very large size. Remediation...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the parser process. An attacker can cause excessive memory consumption by submitting a specially crafted Helm chart archive that decompresses to a very large size. Remediation...