Aller au contenu
en Se connecter
4.8 Moyenne

CVE-2026-35206 Helm is a package manager for Charts for Kubernetes

Description

Helm is a package manager for Charts for Kubernetes. In Helm versions <=3.20.1 and <=4.1.3, a specially crafted Chart will cause helm pull --untar [chart URL | repo/chartname] to write the Chart's contents to the immediate output directory (as defaulted to the current working directory; or as given by the --destination and --untardir flags), rather than the expected output directory suffixed by the chart's name. This vulnerability is fixed in 3.20.2 and 4.1.4.

Produits et versions touchés

Produit Versions touchées Corrigé en
helm 4.0 4.0.0 → < 4.1.4 4.1.4
helm 3.20 premières → < 3.20.2 3.20.2

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de helm

Les 25 CVE de helm →
CVE-2026-63308 Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the Files.Lines template… 5.3 Moyenne CVE-2026-35205 Helm is a package manager for Charts for Kubernetes 8.4 Élevée CVE-2026-35204 Helm is a package manager for Charts for Kubernetes 8.4 Élevée CVE-2025-55198 Helm is a package manager for Charts for Kubernetes 6.5 Moyenne
Suivre cette CVE