SUSE SLES15 / openSUSE 15 Security Update : helm-mirror (SUSE-SU-2025:01830-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01830-1 advisory. - CVE-2025-32386: Fixed denial of service due to memory exhaustion after loading a specially crafter chart bsc124102...

SUSE-SU-2025:01830-1 Security update for helm-mirror

This update for helm-mirror fixes the following issues: - CVE-2025-32386: Fixed denial of service due to memory exhaustion after loading a specially crafter chart bsc1241028 - CVE-2025-32387: Fixed stack overflow due to parser recursion that can exceed the stack size limit bsc1241031...

CVE-2025-32386 affecting package helm for versions less than 3.15.2-3

CVE-2025-32386 affecting package helm for versions less than 3.15.2-3. A patched version of the package is available...

CVE-2025-22872 affecting package helm for versions less than 3.15.2-3

CVE-2025-22872 affecting package helm for versions less than 3.15.2-3. A patched version of the package is available...

The vulnerability of the package manager for Kubernetes Helm, related to the lack of control over user-input data, allows a malicious actor to trigger a service failure.

The vulnerability of the package manager for Kubernetes Helm is related to the lack of control over data entered by users. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Kubernetes Helm package manager, related to buffer overflows in the stack, allows a attacker to cause a service failure.

The vulnerability of the package manager for Kubernetes Helm is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to trigger a service failure...

Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow

...

Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination

...

CVE-2024-52814

Argo Helm is a collection of community maintained charts for argoproj.github.io projects. Prior to version 0.45.0, the workflow-role lacks granularity in its privileges, giving permissions to workflowtasksets and workflowartifactgctasks to all workflow Pods, when only certain types of Pods create...

CVE-2024-52799

Argo Workflows Chart is used to set up argo and its needed dependencies through one command. Prior to 0.44.0, the workflow-role has excessive privileges, the worst being create pods/exec, which will allow kubectl exec into any Pod in the same namespace, i.e. arbitrary code execution within those...

CVE-2023-28114

cilium-cli is the command line interface to install, manage, and troubleshoot Kubernetes clusters running Cilium. Prior to version 0.13.2,cilium-cli, when used to configure cluster mesh functionality, can remove the enforcement of user permissions on the etcd store used to mirror local cluster...

CVE-2023-0518

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, all versions starting from 15.8 before 15.8.1. It was possible to trigger a DoS attack by uploading a malicious Helm chart...

CVE-2021-23154

In Lens prior to 5.3.4, custom helm chart configuration creates helm commands from string concatenation of provided arguments which are then executed in the user's shell. Arguments can be provided which cause arbitrary shell commands to run on the system...

CVE-2020-14470

In Octopus Deploy 2018.8.0 through 2019.x before 2019.12.2, an authenticated user with could trigger a deployment that leaks the Helm Chart repository password...

CVE-2019-18658

In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service DoS via a special file such as /dev/urandom, via...

CVE-2019-1010275

helm Before 2.7.2 is affected by: CWE-295: Improper Certificate Validation. The impact is: Unauthorized clients could connect to the server because self-signed client certs were aloowed. The component is: helm many files updated, see...

openSUSE Security Advisory (SUSE-SU-2025:01596-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2025:01596-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:01596-1 advisory. help was updated to version 3.17.3: Helm v3.17.3 is a security patch release. Users are strongly recommended to update to thi...

Security update for helm

This update for helm fixes the following issues: help was updated to version 3.17.3: Helm v3.17.3 is a security patch release. Users are strongly recommended to update to this release. Changelog Unarchiving fix e4da497 Matt Farina Patch Instructions: To install this SUSE update use the SUSE...

SUSE-SU-2025:01596-1 Security update for helm

This update for helm fixes the following issues: help was updated to version 3.17.3: Helm v3.17.3 is a security patch release. Users are strongly recommended to update to this release. Changelog - Unarchiving fix e4da497 Matt Farina...