Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Helm's plugin verification fails open when .prov is missing, allowing unsigned plugin install
Vulnerability Description
Helm is a package manager for Charts for Kubernetes. From 4.0.0 to 4.1.3, Helm will install plugins missing provenance (.prov file) when signature verification is required. This vulnerability is fixed in 4.1.4.
CVSS Information
N/A
Vulnerability Type
未能安全地进行程序失效(Failing Open)
Vulnerability Title
Helm 安全漏洞
Vulnerability Description
Helm是CNCF基金会的一款Kubernetes包管理器。 Helm 4.1.3及之前版本存在安全漏洞，该漏洞源于在需要签名验证时仍会安装缺少来源证明的插件。
CVSS Information
N/A
Vulnerability Type
N/A