Go/helm.sh/helm/v3 CVE-2021-21303: medium 6.5, EPSS 1.09%

Improper Neutralization of Special Elements in Output in helm.sh/helm/v3

Action: Upgrade helm.sh/helm/v3 to 3.5.2 or later.

go get helm.sh/helm/v3@v3.5.2

Affected

Fixed versions

Sources

• osv: GHSA-c38g-469g-cmgx
• https://github.com/helm/helm/security/advisories/GHSA-c38g-469g-cmgx
• https://nvd.nist.gov/vuln/detail/CVE-2021-21303
• https://github.com/helm/helm/commit/6ce9ba60b73013857e2e7c73d3f86ed70bc1ac9a
• https://github.com/advisories/GHSA-c38g-469g-cmgx
• https://github.com/helm/helm
• https://github.com/helm/helm/releases/tag/v3.5.2
• https://pkg.go.dev/vuln/GO-2022-1040

CVE-2021-21303 · published 2021-06-23T18:14:40Z · modified 2026-07-08T06:27:57.157120110Z · JSON