HE
Product
helm
by helm · last CVE Jul 17, 2026
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 9Medium 15Low 3
Watch

Add helm to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-21303
6.8
1%
Feb 5
Helm is open-source software which is essentially "The Kubernetes Package Manager"
Affected: 3.0.0 before 3.5.2
CVE-2020-4053
6.8
1%
Jun 16
In Helm greater than or equal to 3.0.0 and less than 3.2.4, a path traversal attack is possible when installing Helm plugins from a tar archive over HTTP
Affected: 3.0.0 before 3.2.4
CVE-2026-63308
6.5
0%
Jul 17
Helm Files.Lines Denial of Service via Empty Chart Files
Affected: through 4.2.3
CVE-2025-55198
6.5
0%
Aug 13
Helm May Panic Due To Incorrect YAML Content
Affected: < 3.18.5
CVE-2025-55199
6.5
0%
Aug 13
Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion
Affected: < 3.18.5
CVE-2025-32386
6.5
0%
Apr 9
Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination
Affected: < 3.17.3
CVE-2025-32387
6.5
0%
Apr 9
Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow
Affected: < 3.17.3
CVE-2019-25210
6.5
1%
Mar 3
An issue was discovered in Cloud Native Computing Foundation (CNCF) Helm through 3.13.3
Affected: All versions, or not specified
CVE-2022-36055
6.5
1%
Sep 1
Helm is a tool for managing Charts
Affected: 3.0.0 before 3.9.4
CVE-2019-1000008
6.5
1%
Feb 4
All versions of Helm between Helm >=2.0.0 and < 2.12.2 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The…
Affected: 2.0.0 before 2.12.2
CVE-2024-25620
6.4
1%
Feb 15
Helm is a tool for managing Charts
Affected: before 3.14.1
CVE-2020-11013
5.0
1%
Apr 24
Their is an information disclosure vulnerability in Helm from version 3.1.0 and before version 3.2.0
Affected: 3.1.0 before 3.2.0
CVE-2020-15187
4.7
2%
Sep 17
In Helm before versions 2.16.11 and 3.3.2, a Helm plugin can contain duplicates of the same entry, with the last one always used
Affected: 2.0.0 before 2.16.11; 3.0.0 before 3.3.2
CVE-2026-35206
4.4
0%
Apr 9
Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment
Affected: >= 4.0.0, < 4.1.4; < 3.20.2
CVE-2023-25165
4.3
1%
Feb 8
Helm is a tool that streamlines installing and managing Kubernetes applications.`getHostByName` is a Helm template function introduced in Helm v3
Affected: 3.0.0 before 3.11.1
Showing 15