- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 22 · 3 high, 13 medium, 5 low
- Registry
- pkg.go.dev
Advisories 22
- CVE-2026-35206Medium 4.8
Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment
Affected: fixed in 3.20.2.
- CVE-2025-55198Medium 6.5
Helm May Panic Due To Incorrect YAML Content
Affected: fixed in 3.18.5.
- CVE-2025-55199Medium 6.5
Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion
Affected: fixed in 3.18.5.
- CVE-2025-53547High 8.5
Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution
Affected: from 3.18.0-rc.1, fixed in 3.18.4; fixed in 3.17.4; fixed in 3.18.4.
- CVE-2025-32386Medium 6.5
Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination
Affected: fixed in 3.17.3.
- CVE-2025-32387Medium 6.5
Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow
Affected: fixed in 3.17.3.
- CVE-2024-26147High 7.5
Helm's Missing YAML Content Leads To Panic
Affected: fixed in 3.14.2.
- CVE-2024-25620Medium 6.4
Dependency management path traversal in helm
Affected: fixed in 3.14.1.
- CVE-2023-25165Medium 4.3
getHostByName Function Information Disclosure
Affected: fixed in 3.11.1; from 3.0.0, fixed in 3.11.1.
- CVE-2022-23526Medium 5.3
Helm contains Denial of service through schema file
Affected: fixed in 3.10.3.
- CVE-2022-23525Medium 5.3
Helm vulnerable to Denial of service via NULL Pointer Dereference
Affected: fixed in 3.10.3.
- CVE-2022-23524Medium 5.3
Helm vulnerable to Denial of service through string value parsing
Affected: fixed in 3.10.3.
- CVE-2022-36055Medium 6.5
Denial of service in Helm
Affected: fixed in 3.9.4.
- CVE-2021-32690Medium 6.8
Repository credentials passed to alternate domain
Affected: fixed in 3.6.1.
- CVE-2021-21303Medium 5.9
Injection attack in Helm
Affected: from 3.0.0, fixed in 3.5.2.
Show all 22 advisoriesShow fewer advisories
- CVE-2020-15187Low 3.0
Duplicate plugin entries in Helm
Affected: from 3.0.0, fixed in 3.3.2.
- CVE-2020-15186Low 3.4
Improper sanitization of plugin names in Helm
Affected: from 3.0.0, fixed in 3.3.2.
- CVE-2020-15185Low 2.2
Duplicated chart entries in Helm
Affected: from 3.0.0, fixed in 3.3.2.
- CVE-2020-15184Low 3.7
Aliases are never checked in Helm
Affected: from 3.0.0, fixed in 3.3.2.
- CVE-2020-4053Low 3.7
Path Traversal in Helm Plugin Archive
Affected: from 3.0.0, fixed in 3.2.4.
- CVE-2020-11013High 8.5
lookup Function Information Discolosure in Helm
Affected: from 3.0.0, fixed in 3.1.3.
- CVE-2020-7919Unrated
Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows…
Affected: from 3.0.0, fixed in 3.1.0.