{"action":"Upgrade helm.sh/helm to 2.16.11 or later.","affected":[{"fixed":"2.16.11","introduced":"0"}],"component":"helm.sh/helm","cve_ids":["CVE-2020-15185"],"ecosystem":"Go","epss":0.00883,"exploited":false,"fixed_versions":["2.16.11"],"ghsa_id":"GHSA-jm56-5h66-w453","id":"tcs_01M5KFEDD3NBQHS7AH45G6YS85","modified_at":"2026-07-08T06:27:39.471417012Z","published_at":"2021-05-24T16:57:06Z","references":["https://osv.dev/vulnerability/GHSA-jm56-5h66-w453","https://github.com/helm/helm/security/advisories/GHSA-jm56-5h66-w453","https://nvd.nist.gov/vuln/detail/CVE-2020-15185","https://github.com/helm/helm/commit/055dd41cbe53ce131ab0357524a7f6729e6e40dc","https://github.com/helm/helm/commit/6aab63765f99050b115f0aec3d6350c85e8da946"],"severity":{"label":"low","score":2.2},"sources":[{"source":"osv","source_id":"GHSA-jm56-5h66-w453#Go/helm.sh/helm","url":"https://osv.dev/vulnerability/GHSA-jm56-5h66-w453"}],"summary":"Repository index file allows for duplicates of the same chart entry in helm"}