https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:16:47.294310+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-04524 bdu:2024-04524 2026-10-03T18:16:47.609116+00:00 bdu:2024-04524 https://cve.radiocsirt.org/vuln/bit-helm-2024-25620 BIT-helm-2024-25620 — Dependency management path traversal in helm 2026-10-03T18:16:47.609184+00:00

Affected: Bitnami: helm

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the `Chart.yaml` file includes a relative path change, the chart would be saved outside its expected directory based on the changes in the relative path. The validation and linting did not detect the path changes in the name. This issue has been resolved in Helm v3.14.1. Users unable to upgrade should check all charts used by Helm for path changes in their name as found in the `Chart.yaml` file. This includes dependencies.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0958 certfr-2024-avi-0958 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T18:16:47.609248+00:00 certfr-2024-avi-0958 https://cve.radiocsirt.org/vuln/euvd-2026-159856 EUVD-2026-159856 2026-10-03T18:16:47.609269+00:00 EUVD-2026-159856 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25620 fkie_cve-2024-25620 2026-10-03T18:16:47.609282+00:00

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the `Chart.yaml` file includes a relative path change, the chart would be saved outside its expected directory based on the changes in the relative path. The validation and linting did not detect the path changes in the name. This issue has been resolved in Helm v3.14.1. Users unable to upgrade should check all charts used by Helm for path changes in their name as found in the `Chart.yaml` file. This includes dependencies.

 https://cve.radiocsirt.org/vuln/ghsa-v53g-5gjp-272r GHSA-v53g-5gjp-272r — Helm dependency management path traversal 2026-10-03T18:16:47.609308+00:00

Affected: Go: helm.sh/helm/v3

A Helm contributor discovered a path traversal vulnerability when Helm saves a chart including at download time.

### Impact

When either the Helm client or SDK is used to save a chart whose name within the `Chart.yaml` file includes a relative path change, the chart would be saved outside its expected directory based on the changes in the relative path. The validation and linting did not detect the path changes in the name.

### Patches

This issue has been resolved in Helm v3.14.1.

### Workarounds

Check all charts used by Helm for path changes in their name as found in the `Chart.yaml` file. This includes dependencies.

### Credits

Disclosed by Dominykas Blyžė at Nearform Ltd.

 https://cve.radiocsirt.org/vuln/gsd-2024-25620 gsd-2024-25620 2026-10-03T18:16:47.609365+00:00 gsd-2024-25620 https://cve.radiocsirt.org/vuln/msrc_cve-2024-25620 msrc_CVE-2024-25620 — Dependency management path traversal in helm 2026-10-03T18:16:47.609386+00:00 msrc_CVE-2024-25620 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13714-1 openSUSE-SU-2024:13714-1 — helm-3.14.2-2.1 on GA media 2026-10-03T18:16:47.609413+00:00

helm-3.14.2-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2024:1255 RHSA-2024:1255 — Red Hat Security Advisory: OpenShift Container Platform 4.15.3 bug fix and security update 2026-10-03T18:16:47.609439+00:00

helm: Dependency management path traversal

 https://cve.radiocsirt.org/vuln/suse-ru-2024:4213-1 SUSE-RU-2024:4213-1 — Recommended update for helm 2026-10-03T18:16:47.609466+00:00

Recommended update for helm

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-25620 UBUNTU-CVE-2024-25620 2026-10-03T18:16:47.609492+00:00

Affected: Ubuntu:16.04:LTS: helm, Ubuntu:18.04:LTS: helm, Ubuntu:20.04:LTS: helm, Ubuntu:22.04:LTS: helm, Ubuntu:24.04:LTS: helm, Ubuntu:25.10: helm, Ubuntu:26.04:LTS: helm

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the `Chart.yaml` file includes a relative path change, the chart would be saved outside its expected directory based on the changes in the relative path. The validation and linting did not detect the path changes in the name. This issue has been resolved in Helm v3.14.1. Users unable to upgrade should check all charts used by Helm for path changes in their name as found in the `Chart.yaml` file. This includes dependencies.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0641 WID-SEC-W-2024-0641 — Red Hat Enterprise Linux (Advanced Cluster Management): Mehrere Schwachstellen 2026-10-03T18:16:47.609551+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.