CVE-2025-55198

6.5

MEDIUMCVSS v3

Published

August 14, 2025

Affected

7 projects

Assigned by

GitHub

Severity scale

010

Description

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, when parsing Chart.yaml and index.yaml files, an improper validation of type error can lead to a panic. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring YAML files are formatted as Helm expects prior to processing them with Helm.

helm/helm

GitHubThe Kubernetes Package Manager

< 3.18.5NVD

corezoid/helm

GitHubCorezoid Helm Charts

< 3.18.5NVD

helm

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Helm is a system monitor released under GNU GPLv3.

< 3.18.5NVD

Helm

NuGet GalleryHelm contains a .NET client which you can use to interact with Helm, the package manager for Kubernetes. It contains an client-side implementation of HAPI, the gRPC-based Helm API

< 3.18.5NVD

helm

RubyGems Here's the idea, and it's very simple: you maintain a little database of the servers you work with. You have some commands you run parameterized in relationship to those servers. Those commands are all available as subcommands of helm.

< 3.18.5NVD

helm

NPMA minimal hash router for browsers.

< 3.18.5NVD

langchain-ai/helm

GitHubRepository hosting Langchain helm charts.

< 3.18.5NVD

Security Advisories

CVE-2025-55198

Description

More on this CVE