—
GO-2022-1040
Insufficient sanitization of data files in helm.sh/helm/v3
Quick fix
GO-2022-1040 — helm.sh/helm/v3: upgrade to the fixed version with the command below.
go get helm.sh/helm/v3@v3.5.2Details
Helm does not sanitize all fields read from repository data files. A maliciously crafted data file may contain strings containing arbitrary data. If printed to a terminal, a malicious string could obscure or alter data on the screen.
Are you affected?
Enter the version of the package you're using.