CVE-2026-35206 Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment

Helm is a package manager for Charts for Kubernetes. In Helm versions =3.20.1 and =4.1.3, a specially crafted Chart will cause helm pull --untar chart URL | repo/chartname to write the Chart's contents to the immediate output directory as defaulted to the current working directory; or as given by...

AZL-27027 CVE-2023-2253 affecting package helm for versions less than 3.13.2-1

A flaw was found in the /v2/catalog endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned query string: n. This vulnerability allows a malicious user to submit an unreasonably large value for n, causing the allocation of a massive strin...

Helm 代码问题漏洞

Helm is a Kubernetes package manager. A code issue vulnerability exists in Helm versions prior to 3.10.3 that stems from being constrained by the NULL Pointer Dereference in thechartutil package, which could lead to a segmentation violation...