VDB
GO-2025-3802
GO-2025-3802
PUBLISHED
Helm vulnerable to Code Injection through malicious chart.yaml content in helm.sh/helm
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | flux-fips-2.5 | 0 |
| chainguard | consul-k8s-1.4 | 0 |
| wolfi | k8ssandra-client | 0 |
| chainguard | k8ssandra-client-fips | 0 |
| chainguard | zot | 0 |
| wolfi | kots | 0 |
| wolfi | envoy-gateway | 0 |
| wolfi | tw | 0 |
| wolfi | helm-docs | 0 |
| chainguard | rancher-fleet-fips | 0 |
| wolfi | k9s | 0 |
| chainguard | eksctl | 0 |
| chainguard | consul-k8s-fips-1.6 | 0 |
| chainguard | teleport-15 | 0 |
| helm.sh | helm/v3 | 0 |
| wolfi | kargo | 0 |
| chainguard | k9s | 0 |
| chainguard | envoy-gateway-fips | 0 |
| chainguard | trivy | 0 |
| chainguard | consul-k8s-fips-1.5 | 0 |
…and 77 more
Timeline
- Jul 21, 2025 CVE Published
- Feb 4, 2026 CVE Updated