MEDIUM6.5Go
GHSA-4hfp-h4cw-hj8p· BIT-helm-2025-32386, CVE-2025-32386Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination
Modified: 9/10/2026
package
Go/helm.sh/helm/v3
pkg:go/helm.sh/helm/v3
MEDIUM5.3Go
GHSA-53c4-hhmh-vw5q· BIT-helm-2022-23525, CVE-2022-23525Helm vulnerable to denial of service through through repository index file
Modified: 9/10/2026
HIGH8.5Go
GHSA-557j-xg8c-q2mm· BIT-helm-2025-53547, CVE-2025-53547Helm vulnerable to Code Injection through malicious chart.yaml content
Modified: 9/10/2026
MEDIUMGo
GHSA-56hp-xqp3-w2jf· BIT-helm-2021-32690, CVE-2021-32690Helm passes repository credentials to alternate domain
Modified: 9/10/2026
MEDIUM6.5Go
GHSA-5xqw-8hwv-wg92· BIT-helm-2025-32387, CVE-2025-32387Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow
Modified: 9/10/2026
MEDIUM5.3Go
GHSA-67fx-wx78-jx33· BIT-helm-2022-23526, CVE-2022-23526Helm vulnerable to denial of service through schema file
Modified: 9/10/2026
MEDIUM5.3Go
GHSA-6rx9-889q-vv2r· BIT-helm-2022-23524, CVE-2022-23524Helm vulnerable to denial of service through string value parsing
Modified: 9/10/2026
MEDIUM6.5Go
GHSA-7hfp-qfw3-5jxh· BIT-helm-2022-36055, CVE-2022-36055Helm Vulnerable to denial of service through string value parsing
Modified: 9/10/2026
MEDIUM6.5Go
GHSA-9h84-qmv7-982p· BIT-helm-2025-55199, CVE-2025-55199Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion
Modified: 9/10/2026
LOW3.7Go
GHSA-9vp5-m38w-j776· BIT-helm-2020-15184, CVE-2020-15184Aliases are never checked in helm
Modified: 7/8/2026
MEDIUM6.5Go
GHSA-c38g-469g-cmgx· BIT-helm-2021-21303, CVE-2021-21303Improper Neutralization of Special Elements in Output in helm.sh/helm/v3
Modified: 7/8/2026
LOW3.0Go
GHSA-c52f-pq47-2r9j· BIT-helm-2020-15187, CVE-2020-15187plugin.yaml file allows for duplicate entries in helm
Modified: 7/8/2026
HIGH7.5Go
GHSA-cjjc-xp8v-855w· BIT-golang-2020-7919, CVE-2020-7919Helm uses crypto package vulnerable to panic from malformed X.509 certificate
Modified: 9/10/2026
MEDIUM6.5Go
GHSA-f9f8-9pmf-xv68· BIT-helm-2025-55198, CVE-2025-55198Helm May Panic Due To Incorrect YAML Content
Modified: 9/10/2026
MEDIUMGo
GHSA-hr2v-4r36-88hr· BIT-helm-2026-35206, CVE-2026-35206Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment
Modified: 9/10/2026
LOW2.2Go
GHSA-jm56-5h66-w453· BIT-helm-2020-15185, CVE-2020-15185Repository index file allows for duplicates of the same chart entry in helm
Modified: 7/8/2026
LOW3.4Go
GHSA-m54r-vrmv-hw33· BIT-helm-2020-15186, CVE-2020-15186Improper Sanitizing of plugin names in helm
Modified: 7/8/2026
MEDIUM4.3Go
GHSA-pwcw-6f5g-gxf8· BIT-helm-2023-25165, CVE-2023-25165Helm vulnerable to information disclosure via getHostByName Function
Modified: 9/10/2026
HIGH8.5Go
GHSA-q8q8-93cv-v6h8· BIT-helm-2020-11013, CVE-2020-11013Lookup function information discolosure in helm
Modified: 9/10/2026
LOW3.7Go
GHSA-qq3j-xp49-j73f· BIT-helm-2020-4053, CVE-2020-4053Plugin archive directory traversal in Helm
Modified: 7/8/2026
HIGH7.5Go
GHSA-r53h-jv2g-vpx6· BIT-helm-2024-26147, CVE-2024-26147Helm's Missing YAML Content Leads To Panic
Modified: 9/10/2026
MEDIUM6.4Go
GHSA-v53g-5gjp-272r· BIT-helm-2024-25620, CVE-2024-25620Helm dependency management path traversal
Modified: 9/10/2026
—Go
GO-2022-0384· BIT-helm-2021-32690, CVE-2021-32690Repository credentials passed to alternate domain in helm.sh/helm/v3
Modified: 2/4/2026
—Go
GO-2022-0962· BIT-helm-2022-36055, CVE-2022-36055Denial of service through string value parsing in helm.sh/helm/v3
Modified: 2/4/2026
—Go
GO-2022-1040· BIT-helm-2021-21303, CVE-2021-21303Insufficient sanitization of data files in helm.sh/helm/v3
Modified: 5/20/2024
—Go
GO-2022-1165· BIT-helm-2022-23525, CVE-2022-23525Denial of service via repository index file in helm.sh/helm/v3
Modified: 2/4/2026
—Go
GO-2022-1166· BIT-helm-2022-23526, CVE-2022-23526Denial of service via schema file in helm.sh/helm/v3
Modified: 2/4/2026
—Go
GO-2022-1167· BIT-helm-2022-23524, CVE-2022-23524Denial of service in string value parsing in helm.sh/helm/v3
Modified: 2/4/2026
—Go
GO-2023-1547· BIT-helm-2023-25165, CVE-2023-25165Information disclosure in helm.sh/helm/v3
Modified: 2/4/2026
—Go
GO-2024-2554· BIT-helm-2024-25620, CVE-2024-25620Path traversal in helm.sh/helm/v3
Modified: 2/4/2026
—Go
GO-2024-2575· BIT-helm-2024-26147, CVE-2024-26147Helm's Missing YAML Content Leads To Panic in helm.sh/helm/v3
Modified: 2/4/2026
—Go
GO-2025-3601· BIT-helm-2025-32386, CVE-2025-32386Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination in helm.sh/helm
Modified: 2/4/2026
—Go
GO-2025-3602· BIT-helm-2025-32387, CVE-2025-32387Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow in helm.sh/helm
Modified: 2/4/2026
—Go
GO-2025-3802· BIT-helm-2025-53547, CVE-2025-53547Helm vulnerable to Code Injection through malicious chart.yaml content in helm.sh/helm
Modified: 2/4/2026
—Go
GO-2025-3887· BIT-helm-2025-55199, CVE-2025-55199Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion in helm.sh/helm
Modified: 2/4/2026
—Go
GO-2025-3888· BIT-helm-2025-55198, CVE-2025-55198Helm May Panic Due To Incorrect YAML Content in helm.sh/helm
Modified: 2/4/2026
—Go
GO-2026-5435· BIT-helm-2026-35206, CVE-2026-35206Helm Chart extraction output directory collapse via Chart.yaml name dot-segment in helm.sh/helm
Modified: 8/21/2026