HE
Product
helm
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 9Medium 15Low 3
Watch
Add helm to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-21303 | 6.8 | Feb 5 | Helm is open-source software which is essentially "The Kubernetes Package Manager" Affected: 3.0.0 before 3.5.2 |
| CVE-2020-4053 | 6.8 | Jun 16 | In Helm greater than or equal to 3.0.0 and less than 3.2.4, a path traversal attack is possible when installing Helm plugins from a tar archive over HTTP Affected: 3.0.0 before 3.2.4 |
| CVE-2026-63308 | 6.5 | Jul 17 | Helm Files.Lines Denial of Service via Empty Chart Files Affected: through 4.2.3 |
| CVE-2025-55198 | 6.5 | Aug 13 | Helm May Panic Due To Incorrect YAML Content Affected: < 3.18.5 |
| CVE-2025-55199 | 6.5 | Aug 13 | Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion Affected: < 3.18.5 |
| CVE-2025-32386 | 6.5 | Apr 9 | Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination Affected: < 3.17.3 |
| CVE-2025-32387 | 6.5 | Apr 9 | Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow Affected: < 3.17.3 |
| CVE-2019-25210 | 6.5 | Mar 3 | An issue was discovered in Cloud Native Computing Foundation (CNCF) Helm through 3.13.3 Affected: All versions, or not specified |
| CVE-2022-36055 | 6.5 | Sep 1 | Helm is a tool for managing Charts Affected: 3.0.0 before 3.9.4 |
| CVE-2019-1000008 | 6.5 | Feb 4 | All versions of Helm between Helm >=2.0.0 and < 2.12.2 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The… Affected: 2.0.0 before 2.12.2 |
| CVE-2024-25620 | 6.4 | Feb 15 | Helm is a tool for managing Charts Affected: before 3.14.1 |
| CVE-2020-11013 | 5.0 | Apr 24 | Their is an information disclosure vulnerability in Helm from version 3.1.0 and before version 3.2.0 Affected: 3.1.0 before 3.2.0 |
| CVE-2020-15187 | 4.7 | Sep 17 | In Helm before versions 2.16.11 and 3.3.2, a Helm plugin can contain duplicates of the same entry, with the last one always used Affected: 2.0.0 before 2.16.11; 3.0.0 before 3.3.2 |
| CVE-2026-35206 | 4.4 | Apr 9 | Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment Affected: >= 4.0.0, < 4.1.4; < 3.20.2 |
| CVE-2023-25165 | 4.3 | Feb 8 | Helm is a tool that streamlines installing and managing Kubernetes applications.`getHostByName` is a Helm template function introduced in Helm v3 Affected: 3.0.0 before 3.11.1 |
Showing 15
