{"action":"Upgrade helm.sh/helm/v3 to 3.3.2 or later.","affected":[{"fixed":"3.3.2","introduced":"3.0.0"}],"component":"helm.sh/helm/v3","cve_ids":["CVE-2020-15186"],"ecosystem":"Go","epss":0.00962,"exploited":false,"fixed_versions":["3.3.2"],"ghsa_id":"GHSA-m54r-vrmv-hw33","id":"tcs_01M5KFF7ZGJ1WNB565PM40GY3N","modified_at":"2026-07-08T06:28:31.540338500Z","published_at":"2021-05-24T16:57:12Z","references":["https://osv.dev/vulnerability/GHSA-m54r-vrmv-hw33","https://github.com/helm/helm/security/advisories/GHSA-m54r-vrmv-hw33","https://nvd.nist.gov/vuln/detail/CVE-2020-15186","https://github.com/helm/helm/commit/809e2d999e2c33e20e77f6bff30652d79c287542","https://github.com/helm/helm/commit/c8d6b01d72c9604e43ee70d0d78fadd54c2d8499","https://github.com/helm/helm"],"severity":{"label":"low","score":3.4},"sources":[{"source":"osv","source_id":"GHSA-m54r-vrmv-hw33","url":"https://osv.dev/vulnerability/GHSA-m54r-vrmv-hw33"}],"summary":"Improper Sanitizing of plugin names in helm"}