CVE-2020-15187
2 advisories.
Go/helm.sh/helm/v3 CVE-2020-15187: low 3, EPSS 1.52%
plugin.yaml file allows for duplicate entries in helm
Action: Upgrade helm.sh/helm/v3 to 3.3.2 or later.
go get helm.sh/helm/v3@v3.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.3.2 | - |
Fixed versions
| 3.3.2 |
Sources
- osv: GHSA-c52f-pq47-2r9j
- https://github.com/helm/helm/security/advisories/GHSA-c52f-pq47-2r9j
- https://nvd.nist.gov/vuln/detail/CVE-2020-15187
- https://github.com/helm/helm/commit/6aab63765f99050b115f0aec3d6350c85e8da946
- https://github.com/helm/helm/commit/ac7c07c37d87e09797f714fb57aa5e9cb99d9450
- https://github.com/helm/helm/commit/b0296c0522e837d65f944beefa3fb64fd08ac304
- https://github.com/helm/helm/commit/c8d6b01d72c9604e43ee70d0d78fadd54c2d8499
- https://github.com/helm/helm/commit/d9ef5ce8bad512e325390c0011be1244b8380e4b
- https://github.com/helm/helm/commit/f2ede29480b507b7d8bb152dd8b6b86248b00658
- https://github.com/helm/helm
CVE-2020-15187 · published · modified · JSON
Go/helm.sh/helm CVE-2020-15187: low 3, EPSS 1.52%
plugin.yaml file allows for duplicate entries in helm
Action: Upgrade helm.sh/helm to 2.16.11 or later.
go get helm.sh/helm@v2.16.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.16.11 | - |
Fixed versions
| 2.16.11 |
Sources
- osv: GHSA-c52f-pq47-2r9j#Go/helm.sh/helm
- https://github.com/helm/helm/security/advisories/GHSA-c52f-pq47-2r9j
- https://nvd.nist.gov/vuln/detail/CVE-2020-15187
- https://github.com/helm/helm/commit/6aab63765f99050b115f0aec3d6350c85e8da946
- https://github.com/helm/helm/commit/ac7c07c37d87e09797f714fb57aa5e9cb99d9450
- https://github.com/helm/helm/commit/b0296c0522e837d65f944beefa3fb64fd08ac304
- https://github.com/helm/helm/commit/c8d6b01d72c9604e43ee70d0d78fadd54c2d8499
- https://github.com/helm/helm/commit/d9ef5ce8bad512e325390c0011be1244b8380e4b
- https://github.com/helm/helm/commit/f2ede29480b507b7d8bb152dd8b6b86248b00658
- https://github.com/helm/helm
CVE-2020-15187 · published · modified · JSON