Go/helm.sh/helm CVE-2019-18658: critical 9.8, EPSS 1.75%

Helm Unsafe Link Following

Action: Upgrade helm.sh/helm to 2.15.2 or later.

go get helm.sh/helm@v2.15.2

Affected

Fixed versions

Sources

• osv: GHSA-p5pc-m4q7-7qm9
• https://nvd.nist.gov/vuln/detail/CVE-2019-18658
• https://github.com/helm/helm
• https://helm.sh/blog/2019-10-30-helm-symlink-security-notice

CVE-2019-18658 · published 2022-05-24T22:01:14Z · modified 2024-08-20T20:58:38.061127Z · JSON