GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: cri-tools, kube-logging-operator, controller-gen, dex, oras, prometheus-alertmanager, speedtest-go, nri-mongodb, vite, up, wait-for-port, prometheus-operator, argo-workflows, fq, lazygit, wire-go, dagger, memcached-exporter, nats, vt-cli, vexctl, golangci-lint,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, shfmt, tempo, ip-masq-agent, cilium-fips, etcd, ksops, caddy, tkn-fips, kube-vip-fips, cass-operator-fips, dex-fips, glab, terraform-provider-google, kubeflow-katib, velero-plugin-for-csi-fips, src, nri-rabbitmq,...

openSUSE Security Advisory (SUSE-SU-2024:1137-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:0602-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:0602-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2025:0602-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0602-1 advisory. Update to version 3.17.1: - CVE-2024-45338: Fixed denial of service due to non-linear parsing of case-insensitive...

Security update for helm

This update for helm fixes the following issues: Update to version 3.17.1: CVE-2024-45338: Fixed denial of service due to non-linear parsing of case-insensitive content bsc1235318. CVE-2024-45337: Fixed misuse of ServerConfig.PublicKeyCallback to prevent authorization bypass in golang.org/x/crypt...

SUSE-SU-2025:0602-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.17.1: - CVE-2024-45338: Fixed denial of service due to non-linear parsing of case-insensitive content bsc1235318. - CVE-2024-45337: Fixed misuse of ServerConfig.PublicKeyCallback to prevent authorization bypass in...

Azure Linux 3.0 Security Update: cert-manager / helm (CVE-2024-26147)

The version of cert-manager / helm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26147 advisory. - Helm is a package manager for Charts for Kubernetes. Versions prior to 3.14.2 contain an...

Azure Linux 3.0 Security Update: cert-manager / helm (CVE-2024-25620)

The version of cert-manager / helm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-25620 advisory. - Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources...

Azure Linux 3.0 Security Update: cert-manager / helm / moby-cli / moby-compose / moby-engine (CVE-2023-2253)

The version of cert-manager / helm / moby-cli / moby-compose / moby-engine installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2253 advisory. - A flaw was found in the /v2/catalog endpoint in...

CVE-2022-36049

Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...

CVE-2020-4062

In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...

CVE-2024-29037

datahub-helm provides the Kubernetes Helm charts for deploying Datahub and its dependencies on a Kubernetes cluster. Starting in version 0.1.143 and prior to version 0.2.182, due to configuration issues in the helm chart, if there was a successful initial deployment during a limited window of tim...

helm-3.17.0-2.1 on GA media (moderate)

helm-3.17.0-2.1 on GA media Announcement ID: openSUSE-SU-2025:14725-1 Rating: moderate Cross-References: CVE-2024-45338 CVSS scores: CVE-2024-45338 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2024-45338 SUSE : 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2025:14725-1 helm-3.17.0-2.1 on GA media

These are all security issues fixed in the helm-3.17.0-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-45336 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, shfmt, tempo, ip-masq-agent, cilium-fips, etcd, containerd-fips, kaniko-fips, tkn-fips, kube-vip-fips, cass-operator-fips, dex-fips, kubeflow-katib, velero-plugin-for-csi-fips, nri-rabbitmq, fluent-operator-fips, go-md2man,...

PT-2025-4791 · Cilium +1 · Cilium +1

Name of the Vulnerable Software and Affected Versions: Cilium versions 1.14.0 through 1.14.7 Cilium versions 1.15.0 through 1.15.11 Cilium versions 1.16.0 through 1.16.4 Description: Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default...

CVE-2024-45338 affecting package helm for versions less than 3.15.2-2

CVE-2024-45338 affecting package helm for versions less than 3.15.2-2. A patched version of the package is available...

Moderate: Red Hat Enhancement Advisory: Advisory for publishing Helm 3.15.4 GA release

GA release of Helm 3.15.4 for OpenShift Container Platform 4.17 version. This errata advisory is for publishing the GA release of Helm 3.15.4 for OpenShift Container Platform 4.17 version...