—
GO-2023-1993
Helm Improper Certificate Validation in helm.sh/helm
Quick fix
GO-2023-1993 — helm.sh/helm: upgrade to the fixed version with the command below.
go get helm.sh/helm@v2.7.2+incompatibleDetails
Helm Improper Certificate Validation in helm.sh/helm
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/helm.sh/helm
Introduced in:
0Fixed in: 2.7.2+incompatibleFix
go get helm.sh/helm@v2.7.2+incompatibleReferences
- https://github.com/advisories/GHSA-x6r5-vxfg-gq3v[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2019-1010275[ADVISORY]
- https://github.com/helm/helm/commit/1096813bf9a425e2aa4ac755b6c991b626dfab50[WEB]
- https://github.com/helm/helm/pull/3152[WEB]
- https://github.com/helm/helm/pull/3152/files/1096813bf9a425e2aa4ac755b6c991b626dfab50[WEB]
- https://github.com/helm/helm/releases/tag/v2.7.2[WEB]