{"action":"Upgrade helm.sh/helm/v3 to 3.14.2 or later.","affected":[{"fixed":"3.14.2","introduced":"0"}],"component":"helm.sh/helm/v3","cve_ids":["CVE-2024-26147"],"ecosystem":"Go","epss":0.00934,"exploited":false,"fixed_versions":["3.14.2"],"ghsa_id":"GHSA-r53h-jv2g-vpx6","id":"tcs_01M5KFM2GGAQVRANAT6GG9TN3Q","modified_at":"2026-09-10T03:50:09.851138804Z","published_at":"2024-02-22T19:34:47Z","references":["https://osv.dev/vulnerability/GHSA-r53h-jv2g-vpx6","https://github.com/helm/helm/security/advisories/GHSA-r53h-jv2g-vpx6","https://nvd.nist.gov/vuln/detail/CVE-2024-26147","https://github.com/helm/helm/commit/bb4cc9125503a923afb7988f3eb478722a8580af","https://github.com/helm/helm"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-r53h-jv2g-vpx6","url":"https://osv.dev/vulnerability/GHSA-r53h-jv2g-vpx6"}],"summary":"Helm's Missing YAML Content Leads To Panic"}