HE
Product
helm
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 9Medium 15Low 3
Watch
Add helm to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-35204 | 8.6 | Apr 9 | Helm has a path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory Affected: >= 4.0.0, < 4.1.4 |
| CVE-2025-53547 | 8.6 | Jul 8 | Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution Affected: < 3.18.4 |
| CVE-2021-32690 | 8.6 | Jun 16 | Helm is a tool for managing Charts (packages of pre-configured Kubernetes resources) Affected: before 3.6.1 |
| CVE-2026-35205 | 7.8 | Apr 9 | Helm's plugin verification fails open when .prov is missing, allowing unsigned plugin install Affected: >= 4.0.0, < 4.1.4 |
| CVE-2024-26147 | 7.5 | Feb 21 | Helm is a package manager for Charts for Kubernetes Affected: before 3.14.2 |
| CVE-2022-23526 | 7.5 | Dec 15 | Helm is a tool for managing Charts, pre-configured Kubernetes resources Affected: 3.0.0 before 3.10.3 |
| CVE-2022-23525 | 7.5 | Dec 15 | Helm is a tool for managing Charts, pre-configured Kubernetes resources Affected: 3.0.0 before 3.10.3 |
| CVE-2022-23524 | 7.5 | Dec 15 | Helm is a tool for managing Charts, pre-configured Kubernetes resources Affected: 3.0.0 before 3.10.3 |
| CVE-2022-36049 | 7.5 | Sep 7 | Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage… Affected: 3.0.0 before 3.9.4 |
Showing 9