Vulnerabilities > Helm > Critical

DATE CVE VULNERABILITY TITLE RISK
2019-11-12 CVE-2019-18658 Link Following vulnerability in Helm
In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service (DoS) via a special file such as /dev/urandom, via symlinks.
network
low complexity
helm CWE-59
critical
9.8
2019-07-17 CVE-2019-1010275 Improper Certificate Validation vulnerability in Helm
helm Before 2.7.2 is affected by: CWE-295: Improper Certificate Validation.
network
low complexity
helm CWE-295
critical
9.8