Helm vulnerabilities

Products

• Helm 30

Newest

• helm Helm Files.Lines Denial of Service via Empty Chart Files CVE-2026-63308 Fix available 5.3 MediumJuly 17, 2026
• helm Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment CVE-2026-35206 Fix available 4.8 MediumApril 9, 2026
• helm, red hat helm cli 4.1 +1 more Helm's plugin verification fails open when .prov is missing, allowing unsigned plugin install CVE-2026-35205 Fix available 8.4 HighApril 9, 2026
• helm, red hat helm cli 4.1 +1 more Helm has a path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory CVE-2026-35204 Public exploitFix available 8.4 HighApril 9, 2026
• helm, langchain langsmith +1 more LangSmith Studio has URL Parameter Injection Vulnerability that Enables Token Theft via Malicious baseUrl CVE-2026-25750 8.5 HighMarch 4, 2026
• helm Helm May Panic Due To Incorrect YAML Content CVE-2025-55198 Fix available 6.5 MediumAugust 13, 2025
• helm Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion CVE-2025-55199 Fix available 6.5 MediumAugust 13, 2025
• helm Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution CVE-2025-53547 Public exploitFix available 8.5 HighJuly 8, 2025
• helm Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination CVE-2025-32386 Fix available 6.5 MediumApril 9, 2025
• helm Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow CVE-2025-32387 Fix available 6.5 MediumApril 9, 2025
• helm Withdrawn Advisory: Helm shows secrets in clear text CVE-2019-25210 Disputed 6.5 MediumMarch 3, 2024
• helm Helm's Missing YAML Content Leads To Panic CVE-2024-26147 Fix available 7.5 HighFebruary 21, 2024
• helm Dependency management path traversal in helm CVE-2024-25620 Fix available 6.4 MediumFebruary 14, 2024
• helm getHostByName Function Information Disclosure CVE-2023-25165 Fix available 4.3 MediumFebruary 8, 2023
• helm Helm contains Denial of service through schema file CVE-2022-23526 Fix available 5.3 MediumDecember 14, 2022
• helm Helm vulnerable to Denial of service via NULL Pointer Dereference CVE-2022-23525 Fix available 5.3 MediumDecember 14, 2022
• helm Helm vulnerable to Denial of service through string value parsing CVE-2022-23524 Fix available 5.3 MediumDecember 14, 2022
• fluxcd flux2, helm-controller, helm +2 more Flux2 Helm Controller denial of service CVE-2022-36049 Fix available 7.7 HighSeptember 7, 2022
• helm Denial of service in Helm CVE-2022-36055 Fix available 6.5 MediumAugust 30, 2022
• helm Repository credentials passed to alternate domain CVE-2021-32690 Fix available 6.8 MediumJune 16, 2021
• helm Injection attack in Helm CVE-2021-21303 Fix available 5.9 MediumFebruary 5, 2021
• helm Duplicate plugin entries in Helm CVE-2020-15187 Fix available 3.0 LowSeptember 17, 2020
• helm Improper sanitization of plugin names in Helm CVE-2020-15186 Fix available 3.4 LowSeptember 17, 2020
• helm Duplicated chart entries in Helm CVE-2020-15185 Fix available 2.2 LowSeptember 17, 2020
• helm Aliases are never checked in Helm CVE-2020-15184 Fix available 3.7 LowSeptember 17, 2020
• helm Path Traversal in Helm Plugin Archive CVE-2020-4053 Fix available 3.7 LowJune 16, 2020
• helm lookup Function Information Discolosure in Helm CVE-2020-11013 Fix available 8.5 HighApril 24, 2020
• helm Helm Unsafe Link Following CVE-2019-18658 Fix available 9.8 CriticalNovember 12, 2019
• helm Helm Improper Certificate Validation CVE-2019-1010275 Fix available 9.8 CriticalJuly 17, 2019
• helm chartmuseum Helm ChartMuseum version >=0.1.0 and < 0.8.1 contains a CWE-22: Improper Limitation of a Pathname... CVE-2019-1000009 6.5 MediumFebruary 4, 2019
• helm Helm Path Traversal CVE-2019-1000008 Fix available 6.5 MediumFebruary 4, 2019