—

GO-2026-5566

Helm's plugin verification fails open when .prov is missing, allowing unsigned plugin install in helm.sh/helm

Quick fix

GO-2026-5566 — helm.sh/helm/v4: upgrade to the fixed version with the command below.

go get helm.sh/helm/v4@v4.1.4

Details

Helm's plugin verification fails open when .prov is missing, allowing unsigned plugin install in helm.sh/helm

Enter the version of the package you're using.

Introduced in: 4.0.0 Fixed in: 4.1.4

Fix go get helm.sh/helm/v4@v4.1.4