https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:48:33 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-11272 bdu:2025-11272 https://cve.radiocsirt.org/vuln/bdu:2025-11272 https://cve.radiocsirt.org/vuln/bit-helm-2025-55198 <p><strong>Affected:</strong> Bitnami: helm</p> <p>Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, when parsing Chart.yaml and index.yaml files, an improper validation of type error can lead to a panic. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring YAML files are formatted as Helm expects prior to processing them with Helm.</p> <p><strong>Affected:</strong> Bitnami: helm</p> <p>Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, when parsing Chart.yaml and index.yaml files, an improper validation of type error can lead to a panic. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring YAML files are formatted as Helm expects prior to processing them with Helm.</p> https://cve.radiocsirt.org/vuln/bit-helm-2025-55198 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1131 certfr-2025-avi-1131 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1131 https://cve.radiocsirt.org/vuln/cleanstart-2026-bt39952 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: consul-k8s-fips</p> <p>Multiple security vulnerabilities affect the consul-k8s-fips package. Moby is an open source container framework developed by Docker Inc. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: consul-k8s-fips</p> <p>Multiple security vulnerabilities affect the consul-k8s-fips package. Moby is an open source container framework developed by Docker Inc. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-bt39952 https://cve.radiocsirt.org/vuln/euvd-2026-249810 EUVD-2026-249810 https://cve.radiocsirt.org/vuln/euvd-2026-249810 https://cve.radiocsirt.org/vuln/fkie_cve-2025-55198 <p>Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, when parsing Chart.yaml and index.yaml files, an improper validation of type error can lead to a panic. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring YAML files are formatted as Helm expects prior to processing them with Helm.</p> <p>Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, when parsing Chart.yaml and index.yaml files, an improper validation of type error can lead to a panic. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring YAML files are formatted as Helm expects prior to processing them with Helm.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-55198 https://cve.radiocsirt.org/vuln/ghsa-f9f8-9pmf-xv68 <p><strong>Affected:</strong> Go: helm.sh/helm/v3</p> <p>A Helm contributor discovered an improper validation of type error when parsing Chart.yaml and index.yaml files that can lead to a panic.</p> <p>### Impact</p> <p>There are two areas of YAML validation that were impacted. First, when a `Chart.yaml` file had a `null` maintainer or the `child` or `parent` of a dependencies `import-values` could be parsed as something other than a string, `helm lint` would panic. Second, when an `index.yaml` had an empty entry in the list of chart versions Helm would panic on interactions with that repository.</p> <p>### Patches</p> <p>This issue has been resolved in Helm v3.18.5.</p> <p>### Workarounds</p> <p>Ensure YAML files are formatted as Helm expects prior to processing them with Helm.</p> <p>### References</p> <p>Helm&#39;s security policy is spelled out in detail in our [SECURITY](https://github.com/helm/community/blob/master/SECURITY.md) document.</p> <p>### Credits</p> <p>Disclosed by Jakub Ciolek at AlphaSense.</p> <p><strong>Affected:</strong> Go: helm.sh/helm/v3</p> <p>A Helm contributor discovered an improper validation of type error when parsing Chart.yaml and index.yaml files that can lead to a panic.</p> <p>### Impact</p> <p>There are two areas of YAML validation that were impacted. First, when a `Chart.yaml` file had a `null` maintainer or the `child` or `parent` of a dependencies `import-values` could be parsed as something other than a string, `helm lint` would panic. Second, when an `index.yaml` had an empty entry in the list of chart versions Helm would panic on interactions with that repository.</p> <p>### Patches</p> <p>This issue has been resolved in Helm v3.18.5.</p> <p>### Workarounds</p> <p>Ensure YAML files are formatted as Helm expects prior to processing them with Helm.</p> <p>### References</p> <p>Helm&#39;s security policy is spelled out in detail in our [SECURITY](https://github.com/helm/community/blob/master/SECURITY.md) document.</p> <p>### Credits</p> <p>Disclosed by Jakub Ciolek at AlphaSense.</p> https://cve.radiocsirt.org/vuln/ghsa-f9f8-9pmf-xv68 https://cve.radiocsirt.org/vuln/msrc_cve-2025-55198 msrc_CVE-2025-55198 https://cve.radiocsirt.org/vuln/msrc_cve-2025-55198 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15469-1 <p>govulncheck-vulndb-0.0.20250818T190335-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20250818T190335-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15469-1 https://cve.radiocsirt.org/vuln/rhsa-2025:22257 <p>helm.sh/helm/v3: Helm YAML Parsing Panic Vulnerability helm.sh/helm/v3: Helm Chart JSON Schema Denial of Service</p> <p>helm.sh/helm/v3: Helm YAML Parsing Panic Vulnerability helm.sh/helm/v3: Helm Chart JSON Schema Denial of Service</p> https://cve.radiocsirt.org/vuln/rhsa-2025:22257 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2727 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Container Platform ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Container Platform ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2727