5.3
Moyenne
CVE-2026-63308 Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the Files.Lines template…
Description
Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the Files.Lines template helper in pkg/engine/files.go that allows attackers to trigger an index out of range panic by including zero-length byte slices in chart files. Attackers can include empty files in Helm charts to cause deterministic render failures across template, install, upgrade, lint, and SDK Engine.Render operations.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| helm 4.2 | premières → 4.2.3 | Pas de correctif indiqué |
Références
- Researcher Disclosure github.com
- Pull Request github.com
- Patch Commit github.com
- VulnCheck Advisory: Helm Files.Lines Denial of Service via Empty Chart Files www.vulncheck.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de helm
Les 25 CVE de helm →
CVE-2026-35206
Helm is a package manager for Charts for Kubernetes
4.8
Moyenne
CVE-2026-35205
Helm is a package manager for Charts for Kubernetes
8.4
Élevée
CVE-2026-35204
Helm is a package manager for Charts for Kubernetes
8.4
Élevée
CVE-2025-55198
Helm is a package manager for Charts for Kubernetes
6.5
Moyenne