8.4
Élevée
CVE-2026-35205 Helm is a package manager for Charts for Kubernetes
Description
Helm is a package manager for Charts for Kubernetes. From 4.0.0 to 4.1.3, Helm will install plugins missing provenance (.prov file) when signature verification is required. This vulnerability is fixed in 4.1.4.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| helm 4.0 | 4.0.0 → < 4.1.4 | 4.1.4 |
| Helm CLI 4.1 | Versions non publiées |
Références
- github.com github.com
- github.com github.com
- github.com github.com
- helm.sh helm.sh
Chronologie
- Publiée
- Dernière modification
Autres CVE de helm
Les 25 CVE de helm →
CVE-2026-63308
Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the Files.Lines template…
5.3
Moyenne
CVE-2026-35206
Helm is a package manager for Charts for Kubernetes
4.8
Moyenne
CVE-2026-35204
Helm is a package manager for Charts for Kubernetes
8.4
Élevée
CVE-2025-55198
Helm is a package manager for Charts for Kubernetes
6.5
Moyenne