CVE-2025-32387

6.5

MEDIUMCVSS v3

Published

April 9, 2025

Affected

7 projects

Assigned by

GitHub

Severity scale

010

Description

Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be crafted with a deeply nested chain of references, leading to parser recursion that can exceed the stack size limit and trigger a stack overflow. This issue has been resolved in Helm v3.17.3.

helm/helm

GitHubThe Kubernetes Package Manager

< 3.17.3NVD

corezoid/helm

GitHubCorezoid Helm Charts

< 3.17.3NVD

helm

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Helm is a system monitor released under GNU GPLv3.

< 3.17.3NVD

Helm

NuGet GalleryHelm contains a .NET client which you can use to interact with Helm, the package manager for Kubernetes. It contains an client-side implementation of HAPI, the gRPC-based Helm API

< 3.17.3NVD

helm

RubyGems Here's the idea, and it's very simple: you maintain a little database of the servers you work with. You have some commands you run parameterized in relationship to those servers. Those commands are all available as subcommands of helm.

< 3.17.3NVD

helm

NPMA minimal hash router for browsers.

< 3.17.3NVD

langchain-ai/helm

GitHubRepository hosting Langchain helm charts.

< 3.17.3NVD

Security Advisories

CVE-2025-32387

Description

More on this CVE