https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:39:35 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-11274 bdu:2025-11274 https://cve.radiocsirt.org/vuln/bdu:2025-11274 https://cve.radiocsirt.org/vuln/bit-helm-2025-55199 <p><strong>Affected:</strong> Bitnami: helm</p> <p>Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory (OOM) termination. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring all Helm charts that are being loaded into Helm do not have any reference of $ref pointing to /dev/zero.</p> <p><strong>Affected:</strong> Bitnami: helm</p> <p>Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory (OOM) termination. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring all Helm charts that are being loaded into Helm do not have any reference of $ref pointing to /dev/zero.</p> https://cve.radiocsirt.org/vuln/bit-helm-2025-55199 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1131 certfr-2025-avi-1131 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1131 https://cve.radiocsirt.org/vuln/cleanstart-2026-bt39952 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: consul-k8s-fips</p> <p>Multiple security vulnerabilities affect the consul-k8s-fips package. Moby is an open source container framework developed by Docker Inc. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: consul-k8s-fips</p> <p>Multiple security vulnerabilities affect the consul-k8s-fips package. Moby is an open source container framework developed by Docker Inc. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-bt39952 https://cve.radiocsirt.org/vuln/euvd-2026-249811 EUVD-2026-249811 https://cve.radiocsirt.org/vuln/euvd-2026-249811 https://cve.radiocsirt.org/vuln/fkie_cve-2025-55199 <p>Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory (OOM) termination. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring all Helm charts that are being loaded into Helm do not have any reference of $ref pointing to /dev/zero.</p> <p>Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory (OOM) termination. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring all Helm charts that are being loaded into Helm do not have any reference of $ref pointing to /dev/zero.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-55199 https://cve.radiocsirt.org/vuln/ghsa-9h84-qmv7-982p <p><strong>Affected:</strong> Go: helm.sh/helm/v3</p> <p>A Helm contributor discovered that it was possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory (OOM) termination.</p> <p>### Impact A malicious chart can point `$ref` in _values.schema.json_ to a device (e.g. `/dev/*`) or other problem file which could cause Helm to use all available memory and have an out of memory (OOM) termination.</p> <p>### Patches This issue has been resolved in Helm v3.18.5.</p> <p>### Workarounds Make sure that all Helm charts that are being loaded into Helm doesn&#39;t have any reference of `$ref` pointing to `/dev/zero`.</p> <p>### References Helm&#39;s security policy is spelled out in detail in our [SECURITY](https://github.com/helm/community/blob/master/SECURITY.md) document.</p> <p>### Credits Disclosed by Jakub Ciolek at AlphaSense.</p> <p><strong>Affected:</strong> Go: helm.sh/helm/v3</p> <p>A Helm contributor discovered that it was possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory (OOM) termination.</p> <p>### Impact A malicious chart can point `$ref` in _values.schema.json_ to a device (e.g. `/dev/*`) or other problem file which could cause Helm to use all available memory and have an out of memory (OOM) termination.</p> <p>### Patches This issue has been resolved in Helm v3.18.5.</p> <p>### Workarounds Make sure that all Helm charts that are being loaded into Helm doesn&#39;t have any reference of `$ref` pointing to `/dev/zero`.</p> <p>### References Helm&#39;s security policy is spelled out in detail in our [SECURITY](https://github.com/helm/community/blob/master/SECURITY.md) document.</p> <p>### Credits Disclosed by Jakub Ciolek at AlphaSense.</p> https://cve.radiocsirt.org/vuln/ghsa-9h84-qmv7-982p https://cve.radiocsirt.org/vuln/msrc_cve-2025-55199 msrc_CVE-2025-55199 https://cve.radiocsirt.org/vuln/msrc_cve-2025-55199 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15469-1 <p>govulncheck-vulndb-0.0.20250818T190335-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20250818T190335-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15469-1 https://cve.radiocsirt.org/vuln/rhsa-2025:22257 <p>helm.sh/helm/v3: Helm YAML Parsing Panic Vulnerability helm.sh/helm/v3: Helm Chart JSON Schema Denial of Service</p> <p>helm.sh/helm/v3: Helm YAML Parsing Panic Vulnerability helm.sh/helm/v3: Helm Chart JSON Schema Denial of Service</p> https://cve.radiocsirt.org/vuln/rhsa-2025:22257 https://cve.radiocsirt.org/vuln/suse-su-2026:21434-1 <p>Security update for helm</p> <p>Security update for helm</p> https://cve.radiocsirt.org/vuln/suse-su-2026:21434-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2727 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Container Platform ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Container Platform ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2727