Known vulnerabilities in Helm

Software: Helm
Software CPE: cpe:2.3:a:the_helm_project:helm:*:*:*:*:*:*:*:*
Total vulnerabilities: 29
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Helm Helm is affected by 29 known vulnerabilities: 3 high, 17 medium, 9 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125751 - Improper input validation
CVE-2026-35206
CWE-20 Medium
No
No
3.20.2, 4.1.4 10.04.2026 SB2026040953
SB2026042092
#VU125577 - Improper Verification of Cryptographic Signature
CVE-2026-35205
CWE-347 High
No
No
4.1.4 09.04.2026 SB2026040953
#VU125576 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-35204
CWE-22 High
No
No
4.1.4 09.04.2026 SB2026040953
#VU123134 - Use of Uninitialized Resource
CVE-2025-55198
CWE-908 Medium
No
No
3.18.5 23.02.2026 SB2026022338
SB2026022442
#VU123133 - Allocation of Resources Without Limits or Throttling
CVE-2025-55199
CWE-770 Medium
No
No
3.18.5 23.02.2026 SB2026022337
SB2026022442
SB2026042092
#VU112039 - Allocation of Resources Without Limits or Throttling
CVE-2025-32386
CWE-770 Medium
No
No
3.17.3 30.06.2025 SB2025063006
SB2025063009
SB2025063011
and 3 more
#VU111974 - Stack-based buffer overflow
CVE-2025-32387
CWE-121 Medium
No
No
3.17.3 26.06.2025 SB2025062648
SB2025063009
SB2025063011
and 3 more
#VU88099 - Exposure of sensitive information to an unauthorized actor
CVE-2019-25210
CWE-200 Low
No
No
- 03.04.2024 SB2024040356
SB2024040357
SB2024040358
and 2 more
#VU88098 - Use of Uninitialized Variable
CVE-2024-26147
CWE-457 Low
No
No
3.14.2 03.04.2024 SB2024040355
SB2024040357
SB2024040358
and 13 more
#VU86548 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-25620
CWE-22 Medium
No
No
3.14.1 15.02.2024 SB2024021537
SB2024040354
SB2024040360
and 9 more
#VU72073 - Exposure of sensitive information to an unauthorized actor
CVE-2023-25165
CWE-200 Medium
No
No
3.11.1 08.02.2023 SB2023020875
SB2023032437
SB2023040464
and 7 more
#VU70620 - Improper input validation
CVE-2022-23524
CWE-20 Medium
No
No
3.10.3 03.01.2023 SB2023010306
SB2023010307
SB2023041126
and 7 more
#VU70619 - Improper input validation
CVE-2022-23525
CWE-20 Medium
No
No
3.10.3 03.01.2023 SB2023010306
SB2023010307
SB2023041126
and 5 more
#VU70618 - Improper input validation
CVE-2022-23526
CWE-20 Medium
No
No
3.10.3 03.01.2023 SB2023010306
SB2023010307
SB2023041126
and 9 more
#VU67945 - Resource exhaustion
CVE-2022-36055
CWE-400 Medium
No
No
3.9.4 05.10.2022 SB2022100548
SB2022100551
SB2022102004
and 4 more
#VU66768 - Improper input validation
CVE-2022-36049
CWE-20 Medium
No
No
3.9.4 25.08.2022 SB2022082544
#VU66447 - Overly Permissive Cross-domain Whitelist
CVE-2022-1996
CWE-942 Low
No
No
3.9.3 12.08.2022 SB2022081216
SB2022081228
SB2022081229
and 65 more
#VU54184 - Exposure of sensitive information to an unauthorized actor
CVE-2021-32690
CWE-200 Medium
No
No
3.6.1 17.06.2021 SB2021061703
SB2021062219
SB2021092220
and 3 more
#VU50431 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2021-21303
CWE-74 Medium
No
No
3.5.2 05.02.2021 SB2021020906
SB2021020907
SB2023062019
#VU47087 - Improper input validation
CVE-2020-15186
CWE-20 Low
No
No
2.16.11, 3.3.2 18.09.2020 SB2020091749


Showing elements 1 - 20 out of 29