helm-charts vulnerabilities
CVEs whose affected-version data names the helm-charts package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-54532Medium· 6.9CloudPirates Open Source Helm Charts: pull_request_target workflow vulnerable to cache poisoning and OIDC token theft
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit 271d415, pull_request_target workflow is vulnerable to cache poisoning and OIDC token theft. A pull_request_target workflow checks out fork code using g…
▾ SunlitCloudPirates-io · helm-chartsEPSS 0.19%via CVEORG
CVE-2026-85751Critical· 9.8Mailu is a mail server distributed as a set of Docker images
Mailu is a mail server distributed as a set of Docker images. From Mailu 2.0 until 2024.06.55 and prior to Mailu helm-charts 2.7.3, deployments with PROXY_AUTH_WHITELIST configured but REAL_IP_HEADER unset trusted a client-controlled X-F…
▾ MidnightMailu · MailuEPSS 0.56%via NVD