CVE-2025-55198mediumCWE-908

CVE-2025-55198: falha de média gravidade em helm

Helm May Panic Due To Incorrect YAML Content

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar helm+ Monitorar helm.sh/helm/v3

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.4%
Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, when parsing Chart.yaml and index.yaml files, an improper validation of type error can lead to a panic. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring YAML files are formatted as Helm expects prior to processing them with Helm.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Produtos afetados
helm · helm
CVEs relacionadas — helm

No mesmo produto, das mais perigosas para as menos.

CVE-2020-15187LOWDuplicate plugin entries in HelmEPSS 1.5%CVE-2021-32690MEDIUMRepository credentials passed to alternate domainEPSS 1.4%CVE-2019-1010275—CVE-2019-1010275EPSS 1.4%CVE-2022-36055MEDIUMDenial of service in HelmEPSS 1.1%CVE-2021-21303MEDIUMInjection attack in HelmEPSS 1.1%CVE-2020-15184LOWAliases are never checked in HelmEPSS 1.0%