Database/Container, Kubernetes & orchestration
Helm: Path traversal in `helm fetch --untar` writes outside the target directory
CVSS 6.5CVE-2019-1000008Container, Kubernetes & orchestrationcurated
Impact
Path traversal in helm fetch --untar writes outside the target directory
Who can reach it
Malicious chart
What to do
Upgrade Helm on all CI and operator machines
References
Related entries
- Helm: OOM panic in the strvals package from crafted `--set` inputCVE-2022-36055 · HelmMedium
- Helm: Decompression bomb chart exhausts memory on the rendering hostCVE-2025-32386 · HelmMedium
- Helm: Deeply nested JSON Schema references cause stack overflowCVE-2025-32387 · HelmMedium
- Helm: Crafted JSON Schema causes OOM termination of the rendererCVE-2025-55199 · HelmMedium
- Helm: Relative path in a chart name writes the chart outside the intended directoryCVE-2024-25620 · HelmMedium
- Helm: Improper certificate validation allows unauthorized clients to connect to TillerCVE-2019-1010275 · HelmCritical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.