Go/helm.sh/helm/v3 CVE-2024-26147: unknown, EPSS 0.93%
Helm's Missing YAML Content Leads To Panic in helm.sh/helm/v3
Action: Upgrade helm.sh/helm/v3 to 3.14.2 or later.
go get helm.sh/helm/v3@v3.14.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.14.2 | - |
Fixed versions
| 3.14.2 |
Sources
- osv: GO-2024-2575
- https://github.com/helm/helm/security/advisories/GHSA-r53h-jv2g-vpx6
- https://github.com/helm/helm/commit/bb4cc9125503a923afb7988f3eb478722a8580af
CVE-2024-26147 · published · modified · JSON