Go/helm.sh/helm/v3 CVE-2025-55199: medium 6.5, EPSS 0.33%
Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion in helm.sh/helm
Action: Upgrade helm.sh/helm/v3 to 3.18.5 or later.
go get helm.sh/helm/v3@v3.18.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.18.5 | - |
Fixed versions
| 3.18.5 |
Sources
- osv: GO-2025-3887#Go/helm.sh/helm/v3
- nvd: CVE-2025-55199
- https://github.com/helm/helm/security/advisories/GHSA-9h84-qmv7-982p
- https://github.com/helm/helm/commit/b78692c18f0fb38fe5ba4571a674de067a4c53a5
CVE-2025-55199 · published · modified · JSON