Go/helm.sh/helm/v3 CVE-2020-15185: low 2.2, EPSS 0.88%
Repository index file allows for duplicates of the same chart entry in helm
Action: Upgrade helm.sh/helm/v3 to 3.3.2 or later.
go get helm.sh/helm/v3@v3.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.3.2 | - |
Fixed versions
| 3.3.2 |
Sources
- osv: GHSA-jm56-5h66-w453
- https://github.com/helm/helm/security/advisories/GHSA-jm56-5h66-w453
- https://nvd.nist.gov/vuln/detail/CVE-2020-15185
- https://github.com/helm/helm/commit/055dd41cbe53ce131ab0357524a7f6729e6e40dc
- https://github.com/helm/helm/commit/6aab63765f99050b115f0aec3d6350c85e8da946
CVE-2020-15185 · published · modified · JSON