—
GO-2026-5666
Helm path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory in helm.sh/helm
Quick fix
GO-2026-5666 — helm.sh/helm/v4: upgrade to the fixed version with the command below.
go get helm.sh/helm/v4@v4.1.4Details
Helm path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory in helm.sh/helm
Are you affected?
Enter the version of the package you're using.