CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: kube-bench, mockery, php-fpmexporter, opentelemetry-collector, kubelet-csr-approver, nova, nri-apache, terraform-provider-azuread, rancher-system-agent, newrelic-infrastructure-agent, paranoia, kiali, opencost, src, karma, s5cmd, kubeflow, gogatekeeper, octo-sts,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: kube-bench, mockery, php-fpmexporter, opentelemetry-collector, kubelet-csr-approver, nova, nri-apache, terraform-provider-azuread, rancher-system-agent, newrelic-infrastructure-agent, paranoia, kiali, opencost, src, karma, s5cmd, kubeflow, gogatekeeper, octo-sts,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-fips, actions-runner-controller-fips, flux-notification-controller-fips, thanos-operator, octo-sts, falcoctl-fips, ko, flux-source-controller-fips, kpt, pluto, flannel-cni-plugin-fips, kubernetes-csi-external-resizer, quic-go-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: kubelet-csr-approver, nats, nri-mysql, nova, kor, fuse-overlayfs-snapshotter, aws-nuke, helm-docs, opencost, grpc-health-probe, external-dns, apache-exporter, db-operator, nuclei, rancher-fleet, pgtimetable, supercronic, spire-server, k3d, nri-jmx,...

BIT-FLUX-2022-36049 Flux2 Helm Controller denial of service

Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...

BIT-FLUX-2022-24817 Improper kubeconfig validation allows arbitrary code execution

Flux2 is an open and extensible continuous delivery solution for Kubernetes. Flux2 versions between 0.1.0 and 0.29.0, helm-controller 0.1.0 to v0.19.0, and kustomize-controller 0.1.0 to v0.23.0 are vulnerable to Code Injection via malicious Kubeconfig. In multi-tenancy deployments this can also...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.20.6 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.6 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

RHEA-2025:0507 Red Hat Enhancement Advisory: Advisory for publishing Helm 3.15.4 GA release

Bulletin has no description...

EUVD-2025-200055

Malicious code in kubernetes-helm npm...

Malicious code in kubernetes-helm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d507ab92764d5a31189e5fc42060eca5ba9b17fd8fc4d35de9ad266c1eb63144 The package kubernetes-helm was found to contain malicious code...

MAL-2025-191514 Malicious code in kubernetes-helm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d507ab92764d5a31189e5fc42060eca5ba9b17fd8fc4d35de9ad266c1eb63144 The package kubernetes-helm was found to contain malicious code...

CVE-2025-64751

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.4.0 to v1.11.0 openfga-0.1.34 = Helm chart = openfga-0.2.48, v.1.4.0 = docker = v.1.11.0 are vulnerable to improper policy enforcement when certain Check and...

SUSE: Security Advisory (SUSE-SU-2025:4190-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:4190-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2025:4190-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4190-1 advisory. - Update to version 3.19.1 - CVE-2025-53547: Fixed local code execution in Helm Chart. bsc1246152 - CVE-2025-58190:...

Security update for helm

This update for helm fixes the following issues: Update to version 3.19.1 CVE-2025-53547: Fixed local code execution in Helm Chart. bsc1246152 CVE-2025-58190: Fixed excessive memory consumption by html.ParseFragment when processing specially crafted input. bsc1251649 CVE-2025-47911: Fixed various...

SUSE-SU-2025:4190-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.19.1 - CVE-2025-53547: Fixed local code execution in Helm Chart. bsc1246152 - CVE-2025-58190: Fixed excessive memory consumption by html.ParseFragment when processing specially crafted input. bsc1251649 - CVE-2025-47911: Fixed...

CVE-2025-65109

Minder is an open source software supply chain security platform. In Minder Helm version 0.20241106.3386+ref.2507dbf and Minder Go versions from 0.0.72 to 0.0.83, Minder users may fetch content in the context of the Minder server, which may include URLs which the user would not normally have acce...

CVE-2025-65109

Minder is an open source software supply chain security platform. In Minder Helm version 0.20241106.3386+ref.2507dbf and Minder Go versions from 0.0.72 to 0.0.83, Minder users may fetch content in the context of the Minder server, which may include URLs which the user would not normally have acce...

CVE-2025-65109 Minder does not sandbox http.send in Rego programs

Minder is an open source software supply chain security platform. In Minder Helm version 0.20241106.3386+ref.2507dbf and Minder Go versions from 0.0.72 to 0.0.83, Minder users may fetch content in the context of the Minder server, which may include URLs which the user would not normally have acce...