LOW3.7Go
GHSA-9vp5-m38w-j776· BIT-helm-2020-15184, CVE-2020-15184Aliases are never checked in helm
Modified: 7/8/2026
package
Go/helm.sh/helm
pkg:go/helm.sh/helm
LOW3.0Go
GHSA-c52f-pq47-2r9j· BIT-helm-2020-15187, CVE-2020-15187plugin.yaml file allows for duplicate entries in helm
Modified: 7/8/2026
LOW2.2Go
GHSA-jm56-5h66-w453· BIT-helm-2020-15185, CVE-2020-15185Repository index file allows for duplicates of the same chart entry in helm
Modified: 7/8/2026
LOW3.4Go
GHSA-m54r-vrmv-hw33· BIT-helm-2020-15186, CVE-2020-15186Improper Sanitizing of plugin names in helm
Modified: 7/8/2026
CRITICAL9.8Go
GHSA-p5pc-m4q7-7qm9· CVE-2019-18658, GO-2023-1938Helm Unsafe Link Following
Modified: 8/20/2024
CRITICAL9.8Go
GHSA-x6r5-vxfg-gq3v· CVE-2019-1010275, GO-2023-1993Helm Improper Certificate Validation
Modified: 8/20/2024
MEDIUM6.5Go
GHSA-xrxm-mvqm-r553· CVE-2019-1000008, GO-2023-1948Helm Path Traversal
Modified: 8/20/2024
—Go
GO-2023-1938· CVE-2019-18658, GHSA-p5pc-m4q7-7qm9Helm Unsafe Link Following in helm.sh/helm
Modified: 3/3/2026
—Go
GO-2023-1948· CVE-2019-1000008, GHSA-xrxm-mvqm-r553Helm Path Traversal in helm.sh/helm
Modified: 3/3/2026
—Go
GO-2023-1993· CVE-2019-1010275, GHSA-x6r5-vxfg-gq3vHelm Improper Certificate Validation in helm.sh/helm
Modified: 3/3/2026
—Go
GO-2025-3887· BIT-helm-2025-55199, CVE-2025-55199Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion in helm.sh/helm
Modified: 2/4/2026
—Go
GO-2025-3888· BIT-helm-2025-55198, CVE-2025-55198Helm May Panic Due To Incorrect YAML Content in helm.sh/helm
Modified: 2/4/2026