Skip to content
Noroxi

helm records

30 published records for vendor helm.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
96.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25
  8. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

30 records
  • CVE-2019-18658
    40Plan

    In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciou

    CriticalCVSS 9.8No exploitEPSS 2%

    helm · helmNov 12, 2019

  • CVE-2019-1010275
    39Monitor

    helm Before 2.7.2 is affected by: CWE-295: Improper Certificate Validation.

    CriticalCVSS 9.8No exploitEPSS 1%

    helm · helmJul 17, 2019

  • CVE-2021-32690
    34Monitor

    Repository credentials passed to alternate domain

    HighCVSS 8.6No exploitEPSS 1%

    helm · helmJun 16, 2021

  • CVE-2025-53547
    34Monitor

    Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution

    HighCVSS 8.6Proof of conceptEPSS 0%

    helm · helmJul 8, 2025

  • CVE-2026-35205
    33Monitor

    Helm's plugin verification fails open when .prov is missing, allowing unsigned plugin install

    HighCVSS 8.4No exploitEPSS 0%

    helm · helmApr 9, 2026

  • CVE-2026-35204
    33Monitor

    Helm has a path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory

    HighCVSS 8.4Proof of conceptEPSS 0%

    helm · helmApr 9, 2026

  • CVE-2022-36049
    30Monitor

    Flux2 Helm Controller denial of service

    HighCVSS 7.5No exploitEPSS 1%

    helm · helmSep 7, 2022

  • CVE-2024-26147
    30Monitor

    Helm's Missing YAML Content Leads To Panic

    HighCVSS 7.5No exploitEPSS 1%

    helm · helmFeb 21, 2024

  • CVE-2022-23526
    30Monitor

    Helm contains Denial of service through schema file

    HighCVSS 7.5No exploitEPSS 1%

    helm · helmDec 15, 2022

  • CVE-2022-23525
    30Monitor

    Helm vulnerable to Denial of service via NULL Pointer Dereference

    HighCVSS 7.5No exploitEPSS 1%

    helm · helmDec 15, 2022

  • CVE-2022-23524
    30Monitor

    Helm vulnerable to Denial of service through string value parsing

    HighCVSS 7.5No exploitEPSS 1%

    helm · helmDec 15, 2022

  • CVE-2020-4053
    27Monitor

    Path Traversal in Helm Plugin Archive

    MediumCVSS 6.8No exploitEPSS 1%

    helm · helmJun 16, 2020

  • CVE-2021-21303
    27Monitor

    Injection attack in Helm

    MediumCVSS 6.8No exploitEPSS 1%

    helm · helmFeb 5, 2021

  • CVE-2019-1000008
    26Monitor

    All versions of Helm between Helm >=2.0.0 and < 2.12.2 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path

    MediumCVSS 6.5No exploitEPSS 1%

    helm · helmFeb 4, 2019

  • CVE-2019-1000009
    26Monitor

    Helm ChartMuseum version >=0.1.0 and < 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal

    MediumCVSS 6.5No exploitEPSS 1%

    helm · chartmuseumFeb 4, 2019

  • CVE-2022-36055
    26Monitor

    Denial of service in Helm

    MediumCVSS 6.5No exploitEPSS 1%

    helm · helmSep 1, 2022

  • CVE-2019-25210
    26Monitor

    An issue was discovered in Cloud Native Computing Foundation (CNCF) Helm through 3.13.3.

    MediumCVSS 6.5No exploitEPSS 1%

    helm · helmMar 3, 2024

  • CVE-2025-32387
    26Monitor

    Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow

    MediumCVSS 6.5No exploitEPSS 0%

    helm · helmApr 9, 2025

  • CVE-2025-32386
    26Monitor

    Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination

    MediumCVSS 6.5No exploitEPSS 0%

    helm · helmApr 9, 2025

  • CVE-2025-55198
    26Monitor

    Helm May Panic Due To Incorrect YAML Content

    MediumCVSS 6.5No exploitEPSS 0%

    helm · helmAug 13, 2025

  • CVE-2025-55199
    26Monitor

    Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion

    MediumCVSS 6.5No exploitEPSS 0%

    helm · helmAug 13, 2025

  • CVE-2024-25620
    25Monitor

    Dependency management path traversal in helm

    MediumCVSS 6.4No exploitEPSS 1%

    helm · helmFeb 14, 2024

  • CVE-2026-63308
    21Monitor

    Helm Files.Lines Denial of Service via Empty Chart Files

    MediumCVSS 5.3No exploitEPSS 0%

    helm · helmJul 17, 2026

  • CVE-2020-11013
    20Monitor

    lookup Function Information Discolosure in Helm

    MediumCVSS 5.0No exploitEPSS 1%

    helm · helmApr 24, 2020

  • CVE-2026-35206
    19Monitor

    Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment

    MediumCVSS 4.8No exploitEPSS 0%

    helm · helmApr 9, 2026