https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:05:07.662027+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-11274 bdu:2025-11274 2026-10-03T09:05:07.897739+00:00 bdu:2025-11274 https://cve.radiocsirt.org/vuln/bit-helm-2025-55199 BIT-helm-2025-55199 — Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion 2026-10-03T09:05:07.897784+00:00

Affected: Bitnami: helm

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory (OOM) termination. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring all Helm charts that are being loaded into Helm do not have any reference of $ref pointing to /dev/zero.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1131 certfr-2025-avi-1131 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T09:05:07.897820+00:00 certfr-2025-avi-1131 https://cve.radiocsirt.org/vuln/cleanstart-2026-bt39952 Withdrawn: CLEANSTART-2026-BT39952 — Moby is an open source container framework developed by Docker Inc 2026-10-03T09:05:07.897838+00:00

Withdrawn by the publisher.

Affected: CleanStart: consul-k8s-fips

Multiple security vulnerabilities affect the consul-k8s-fips package. Moby is an open source container framework developed by Docker Inc. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-249811 EUVD-2026-249811 2026-10-03T09:05:07.897859+00:00 EUVD-2026-249811 https://cve.radiocsirt.org/vuln/fkie_cve-2025-55199 fkie_cve-2025-55199 2026-10-03T09:05:07.897871+00:00

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory (OOM) termination. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring all Helm charts that are being loaded into Helm do not have any reference of $ref pointing to /dev/zero.

 https://cve.radiocsirt.org/vuln/ghsa-9h84-qmv7-982p GHSA-9h84-qmv7-982p — Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion 2026-10-03T09:05:07.897893+00:00

Affected: Go: helm.sh/helm/v3

A Helm contributor discovered that it was possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory (OOM) termination.

### Impact A malicious chart can point `$ref` in _values.schema.json_ to a device (e.g. `/dev/*`) or other problem file which could cause Helm to use all available memory and have an out of memory (OOM) termination.

### Patches This issue has been resolved in Helm v3.18.5.

### Workarounds Make sure that all Helm charts that are being loaded into Helm doesn't have any reference of `$ref` pointing to `/dev/zero`.

### References Helm's security policy is spelled out in detail in our [SECURITY](https://github.com/helm/community/blob/master/SECURITY.md) document.

### Credits Disclosed by Jakub Ciolek at AlphaSense.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-55199 msrc_CVE-2025-55199 — Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion 2026-10-03T09:05:07.897920+00:00 msrc_CVE-2025-55199 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15469-1 openSUSE-SU-2025:15469-1 — govulncheck-vulndb-0.0.20250818T190335-1.1 on GA media 2026-10-03T09:05:07.897936+00:00

govulncheck-vulndb-0.0.20250818T190335-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:22257 RHSA-2025:22257 — Red Hat Security Advisory: OpenShift Container Platform 4.20.6 bug fix and security update 2026-10-03T09:05:07.897961+00:00

helm.sh/helm/v3: Helm YAML Parsing Panic Vulnerability helm.sh/helm/v3: Helm Chart JSON Schema Denial of Service

 https://cve.radiocsirt.org/vuln/suse-su-2026:21434-1 SUSE-SU-2026:21434-1 — Security update for helm 2026-10-03T09:05:07.897985+00:00

Security update for helm

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2727 WID-SEC-W-2025-2727 — Red Hat OpenShift Container Platform: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-03T09:05:07.898000+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Container Platform ausnutzen, um einen Denial of Service Angriff durchzuführen.