helm_cli vulnerabilities

CVEs whose affected-version data names the helm_cli package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-35206Medium· 4.4

6mo ago

github.com/helm/helm: Helm: Files written to unexpected directory via specially crafted Chart (CVE-2026-35206)

A flaw was found in Helm, a package manager for Kubernetes. A remote attacker could exploit this vulnerability by providing a specially crafted Chart to the `helm pull --untar` command. This would cause the Chart's contents to be written t…

▾ SunlitRed Hat · Multicluster Engine for KubernetesEPSS 0.20%via CSAF