1525 matches found
Security Bulletin: Astronomer with IBM is vulnerable to local code execution due to the Helm package manager (CVE-2025-53547)
Summary Helm is used by Astronomer with IBM as part of service installation and management. Vulnerability Details CVEID:CVE-2025-53547 DESCRIPTION: Helm is a package manager for Charts for Kubernetes. Prior to 3.18.4, a specially crafted Chart.yaml file along with a specially linked Chart.lock fi...
PT-2025-47814
Name of the Vulnerable Software and Affected Versions Minder Helm version 0.20241106.3386+ref.2507dbf Minder Go versions 0.0.72 through 0.0.83 Description Minder is an open source software supply chain security platform. Minder users may be able to retrieve content through the Minder server that...
SUSE-SU-2025:21043-1 Security update for helm
This update for helm fixes the following issues: Update to version 3.19.1 bsc1251649, CVE-2025-58190, bsc1251442, CVE-2025-47911: choredeps: bump github.com/containerd/containerd from 1.7.28 to 1.7.29 jsonschema: warn and ignore unresolved URN $ref to match v3.18.4 Avoid "panic: interface...
helm-3.19.1-1.1 on GA media (moderate)
helm-3.19.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15730-1 Rating: moderate Cross-References: CVE-2025-47911 CVE-2025-58190 CVSS scores: CVE-2025-47911 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2025-47911 SUSE : 6.9...
OPENSUSE-SU-2025:15730-1 helm-3.19.1-1.1 on GA media
These are all security issues fixed in the helm-3.19.1-1.1 package on the GA media of openSUSE Tumbleweed...
Security Bulletin: Due to the use of helm, IBM Kubecost Self Hosted is affected by stack overflow and memory exhaustion
Summary helm is used by IBM Kubecost Self Hosted as part of the cluster-controller component CVE-2025-32387, CVE-2025-32386 Vulnerability Details CVEID:CVE-2025-32387 DESCRIPTION: Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be crafted with a deeply...
Malicious Package
Overview helm-charts-monorepo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
SUSE SLES15: suse-manager-5.0-aarch64-proxy-httpd-image / etc (SUSE-SU-2025:3825-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:3825-1 advisory. proxy-helm, proxy-httpd-image, proxy-salt-broker-image, proxy-squid-image, proxy-ssh-image, proxy-tftpd- image: - Images rebuilt to the newest version...
Maintenance update for Multi-Linux Manager 5.1.1
Description: This update fixes the following issues: Multi-Linux-Manager-Proxy-SLE-release: Update for the release packages for fixing the EOL Fixed migration issue bsc1243486 proxy-helm was updated fromv version 5.1.7 to 5.1.9: Version 5.1.9 Chart rebuilt to the newest version with updated...
Malicious code in helm-charts-monorepo (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 927894d07d39eb62e7540bb7cb82999c513d6e9478109895a33f8d8027bae41d Any computer that has this package installed or running should be considered...
MAL-2025-48688 Malicious code in helm-charts-monorepo (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 927894d07d39eb62e7540bb7cb82999c513d6e9478109895a33f8d8027bae41d Any computer that has this package installed or running should be considered...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.61 security and extras update
Red Hat OpenShift Container Platform release 4.13.61 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a security impact of Low...
CVE-2025-55198 affecting package helm for versions less than 3.14.2-9
CVE-2025-55198 affecting package helm for versions less than 3.14.2-9. A patched version of the package is available...
Security update 5.1.1 of SUSE Multi-Linux Manager
This update for SUSE Multi-Linux Manager fixes the following issues: proxy-helm was updated fromv version 5.1.7 to 5.1.9: Version 5.1.9 Chart rebuilt to the newest version with updated dependencies Version 5.1.8 Use traefik.io API group bsc1244919 proxy-httpd-image was updated fromv version 5.1.8...
EUVD-2021-1119
Malware in sbrugna...
EUVD-2021-1385
Malware in sbrugna...
EUVD-2021-1265
Malware in sbrugna...
EUVD-2021-1035
Malware in sbrugna...