GO-2025-3802
Helm vulnerable to Code Injection through malicious chart.yaml content in helm.sh/helm
At a glance
- Published
- Updated
- CVE
- CVE-2025-53547
- Aliases
- BIT-helm-2025-53547, GHSA-557j-xg8c-q2mm
Description
Helm vulnerable to Code Injection through malicious chart.yaml content in helm.sh/helm
Affected packages
| Package | Versions |
|---|---|
| Go · helm.sh/helm/v3 | introduced 0, fixed 3.18.4 |
References
- https://github.com/helm/helm/security/advisories/GHSA-557j-xg8c-q2mm ADVISORY
- https://github.com/helm/helm/commit/4b8e61093d8f579f1165cdc6bd4b43fa5455f571 WEB
- https://news.ycombinator.com/item?id=44506696 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |