HE
Vendor
helm
30
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-63308 | HE helm helm | 6.5 | Jul 17 | Helm Files.Lines Denial of Service via Empty Chart Files |
| CVE-2026-35206 | HE helm helm | 4.4 | Apr 9 | Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment |
| CVE-2026-35205 | HE helm helm | 7.8 | Apr 9 | Helm's plugin verification fails open when .prov is missing, allowing unsigned plugin install |
| CVE-2026-35204 | HE helm helm | 8.6 | Apr 9 | Helm has a path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory |
| CVE-2025-55198 | HE helm helm | 6.5 | Aug 13 | Helm May Panic Due To Incorrect YAML Content |
| CVE-2025-55199 | HE helm helm | 6.5 | Aug 13 | Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion |
| CVE-2025-53547 | HE helm helm | 8.6 | Jul 8 | Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution |
| CVE-2025-32386 | HE helm helm | 6.5 | Apr 9 | Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination |
| CVE-2025-32387 | HE helm helm | 6.5 | Apr 9 | Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow |
| CVE-2019-25210 | HE Helm Helm | 6.5 | Mar 3 | An issue was discovered in Cloud Native Computing Foundation (CNCF) Helm through 3.13.3 |
| CVE-2024-26147 | HE Helm Helm | 7.5 | Feb 21 | Helm is a package manager for Charts for Kubernetes |
| CVE-2024-25620 | HE Helm Helm | 6.4 | Feb 15 | Helm is a tool for managing Charts |
| CVE-2023-25165 | HE Helm Helm | 4.3 | Feb 8 | Helm is a tool that streamlines installing and managing Kubernetes applications.`getHostByName` is a Helm template function introduced in Helm v3 |
| CVE-2022-23526 | HE Helm Helm | 7.5 | Dec 15 | Helm is a tool for managing Charts, pre-configured Kubernetes resources |
| CVE-2022-23525 | HE Helm Helm | 7.5 | Dec 15 | Helm is a tool for managing Charts, pre-configured Kubernetes resources |
| CVE-2022-23524 | HE Helm Helm | 7.5 | Dec 15 | Helm is a tool for managing Charts, pre-configured Kubernetes resources |
| CVE-2022-36049 | HE Helm Helm | 7.5 | Sep 7 | Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage… |
| CVE-2022-36055 | HE Helm Helm | 6.5 | Sep 1 | Helm is a tool for managing Charts |
| CVE-2021-32690 | HE Helm Helm | 8.6 | Jun 16 | Helm is a tool for managing Charts (packages of pre-configured Kubernetes resources) |
| CVE-2021-21303 | HE Helm Helm | 6.8 | Feb 5 | Helm is open-source software which is essentially "The Kubernetes Package Manager" |
| CVE-2020-15187 | HE Helm Helm | 4.7 | Sep 17 | In Helm before versions 2.16.11 and 3.3.2, a Helm plugin can contain duplicates of the same entry, with the last one always used |
| CVE-2020-15186 | HE Helm Helm | 2.7 | Sep 17 | In Helm before versions 2.16.11 and 3.3.2 plugin names are not sanitized properly |
| CVE-2020-15185 | HE Helm Helm | 2.7 | Sep 17 | In Helm before versions 2.16.11 and 3.3.2, a Helm repository can contain duplicates of the same chart, with the last one always used |
| CVE-2020-15184 | HE Helm Helm | 2.7 | Sep 17 | In Helm before versions 2.16.11 and 3.3.2 there is a bug in which the `alias` field on a `Chart.yaml` is not properly sanitized |
| CVE-2020-4053 | HE Helm Helm | 6.8 | Jun 16 | In Helm greater than or equal to 3.0.0 and less than 3.2.4, a path traversal attack is possible when installing Helm plugins from a tar archive over HTTP |
| CVE-2020-11013 | HE Helm Helm | 5.0 | Apr 24 | Their is an information disclosure vulnerability in Helm from version 3.1.0 and before version 3.2.0 |
| CVE-2019-18658 | HE Helm Helm | 9.8 | Nov 12 | In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive… |
| CVE-2019-1010275 | HE Helm Helm | 9.8 | Jul 17 | helm Before 2.7.2 is affected by: CWE-295: Improper Certificate Validation |
| CVE-2019-1000009 | CH Chartmuseum Helm | 6.5 | Feb 4 | Helm ChartMuseum version >=0.1.0 and < 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HTTP API to save… |
| CVE-2019-1000008 | HE Helm Helm | 6.5 | Feb 4 | All versions of Helm between Helm >=2.0.0 and < 2.12.2 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The… |