VDB

CVE-2025-55198

CVE-2025-55198 PUBLISHED CVSS 6.5 MEDIUM

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, when parsing Chart.yaml and index.yaml files, an improper validation of type error can lead to a panic. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring YAML files are formatted as Helm expects prior to processing them with Helm.

EPSS 0.33% · 24.4th percentile

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
0.33%
24.4th percentile

Affected Products

VendorProductVersions
Bitnamihelm0
Bitnamihelm0

Timeline

  • Jan 21, 1970 Security Advisory
  • Aug 13, 2025 CVE Published
  • Aug 14, 2025 EPSS Score
  • Aug 14, 2025 Coalition ESS Score
  • Aug 21, 2025 Coalition ESS Score
  • Aug 23, 2025 EPSS Score
  • Aug 26, 2025 Coalition ESS Score
  • Aug 31, 2025 EPSS Score
  • Sep 3, 2025 Coalition ESS Score
  • Sep 9, 2025 EPSS Score
  • Sep 18, 2025 EPSS Score
  • Sep 26, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›