helm vulnerabilities

CVEs per yearBy the year they were published

1. 20191
2. 20205
3. 20212
4. 20224
5. 20231
6. 20242
7. 20255
8. 20264

Newest CVEs

• CVE-2026-63308

  Helm Files.Lines Denial of Service via Empty Chart Files

  helm · helm

  Medium5.3
• CVE-2026-35206

  Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment

  helm · helm

  Medium4.8
• CVE-2026-35205

  Helm's plugin verification fails open when .prov is missing, allowing unsigned plugin install

  helm · helm

  High8.4
• CVE-2026-35204

  Helm has a path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory

  helm · helm

  High8.4
• CVE-2025-55198

  Helm May Panic Due To Incorrect YAML Content

  helm · helm

  Medium6.5
• CVE-2025-55199

  Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion

  helm · helm

  Medium6.5
• CVE-2025-53547

  Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution

  helm · helm

  High8.5
• CVE-2025-32386

  Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination

  helm · helm

  Medium6.5
• CVE-2025-32387

  Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow

  helm · helm

  Medium6.5
• CVE-2024-26147

  Helm's Missing YAML Content Leads To Panic

  helm · helm

  High7.5