Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

helm — Vulnerabilities & Security Advisories 26

All 26 CVE vulnerabilities found in helm, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities specifically affecting Helm, the package manager for Kubernetes, categorized by common weakness types and vendor advisories. It collects a comprehensive set of flaws historically reported for the product, covering the full lifecycle of its release history from initial public disclosure to the most recent security bulletins. Readers can use this aggregation to track the vendor's response to advisories, analyze the prevalence of specific weakness classes, and review the complete vulnerability history for this product. The data provides a neutral, fact-based view of security incidents, enabling teams to identify recurring patterns, assess remediation effectiveness, and correlate specific weaknesses with their operational impact. The collection spans from early critical authentication bypasses and dependency issues to recent supply chain and deserialization flaws, providing a longitudinal perspective on how the product's security posture has evolved. By consolidating these records, the page serves as a reference point for security architects and platform engineers seeking to understand the risk landscape surrounding Kubernetes tooling. No marketing language is used; instead, the content focuses strictly on factual reporting of identified defects and their classification within standard vulnerability taxonomies.

Vendor: helm

CVE ID Title CVSS Severity Published
CVE-2026-63308 Helm Files.Lines Denial of Service via Empty Chart Files CWE-129 4.3 Medium 2026-07-17
CVE-2026-35206 Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment CWE-22 3.5AI Low AI 2026-04-09
CVE-2026-35205 Helm's plugin verification fails open when .prov is missing, allowing unsigned plugin install CWE-636 8.1AI High AI 2026-04-09
CVE-2026-35204 Helm has a path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory CWE-22 5.7AI Medium AI 2026-04-09
CVE-2026-25750 LangSmith Studio has URL Parameter Injection Vulnerability that Enables Token Theft via Malicious baseUrl CWE-74 8.9AI High AI 2026-03-04
CVE-2025-55198 Helm May Panic Due To Incorrect YAML Content CWE-908 6.5 Medium 2025-08-13
CVE-2025-55199 Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion CWE-770 6.5 Medium 2025-08-13
CVE-2025-53547 Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution CWE-94 8.5 High 2025-07-08
CVE-2025-32386 Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination CWE-789 6.5 Medium 2025-04-09
CVE-2025-32387 Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow CWE-121 6.5 Medium 2025-04-09
CVE-2024-26147 Helm's Missing YAML Content Leads To Panic CWE-457 7.5 High 2024-02-21
CVE-2024-25620 Dependency management path traversal in helm CWE-22 6.4 Medium 2024-02-14
CVE-2023-25165 getHostByName Function Information Disclosure CWE-200 4.3 Medium 2023-02-08
CVE-2022-23526 Helm contains Denial of service through schema file CWE-476 5.3 Medium 2022-12-15
CVE-2022-23525 Helm vulnerable to Denial of service via NULL Pointer Dereference CWE-476 5.3 Medium 2022-12-15
CVE-2022-23524 Helm vulnerable to Denial of service through string value parsing CWE-400 5.3 Medium 2022-12-15
CVE-2022-36055 Denial of service in Helm CWE-400 6.5 Medium 2022-09-01
CVE-2021-32690 Repository credentials passed to alternate domain CWE-200 6.8 Medium 2021-06-16
CVE-2021-21303 Injection attack in Helm CWE-74 5.9 Medium 2021-02-05
CVE-2020-15187 Duplicate plugin entries in Helm CWE-694 3.0 Low 2020-09-17
CVE-2020-15186 Improper sanitization of plugin names in Helm CWE-20 3.4 Low 2020-09-17
CVE-2020-15185 Duplicated chart entries in Helm CWE-694 2.2 Low 2020-09-17
CVE-2020-15184 Aliases are never checked in Helm CWE-20 3.7 Low 2020-09-17
CVE-2020-4053 Path Traversal in Helm Plugin Archive CWE-22 3.7 Low 2020-06-16
CVE-2020-11013 lookup Function Information Discolosure in Helm CWE-200 8.5 High 2020-04-24
CVE-2019-1010275 helm 信任管理问题漏洞 CWE-295 9.1 - 2019-07-17

All 26 known CVE vulnerabilities affecting helm with full Chinese analysis, references, and POCs where available.