VDB
GHSA-hr2v-4r36-88hr
GHSA-hr2v-4r36-88hr
PUBLISHED
CVSS 4.800000190734863 MEDIUM
Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment
Risk Scores
CVSS 4.0
4.800000190734863
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | gitlab-operator-fips | 0 |
| chainguard | helm-push | 0 |
| chainguard | cloudbeat-fips-9.2 | 0 |
| wolfi | flux-2.8 | 0 |
| wolfi | tigera-operator-1.41 | 0 |
| wolfi | chart-testing | 0 |
| chainguard | helm-operator | 0, 0 |
| chainguard | tigera-operator-fips-1.40 | 0 |
| chainguard | kubescape-server | 0 |
| chainguard | flux-fips-2.6 | 0 |
| chainguard | tigera-operator-1.41 | 0 |
| chainguard | kube-arangodb-fips-1.4 | 0 |
| wolfi | k9s | 0 |
| wolfi | consul-k8s-1.5 | 0 |
| wolfi | harbor-2.13 | 0 |
| chainguard | gitlab-operator | 0 |
| chainguard | consul-k8s-fips-1.9 | 0 |
| chainguard | zot | 0 |
| wolfi | teleport-18 | 0 |
| chainguard | kubescape | 0 |
…and 143 more
Timeline
- Apr 10, 2026 CVE Published
- Apr 11, 2026 Security Advisory