helm.sh/helm/v4
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment | helm.sh/helm/v3helm.sh/helm/v4 | GoRed Hat | Medium | Fix reported | |
| Helm has a path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory | helm.sh/helm/v4Red Hat OpenShift AI (RHOAI)/rhoai/odh-ogx-module-operator-rhel9 | GoRed Hat | High | Fix reported | |
| Helm's plugin verification fails open when .prov is missing, allowing unsigned plugin install | helm.sh/helm/v4Red Hat OpenShift AI (RHOAI)/rhoai/odh-ogx-module-operator-rhel9 | GoRed Hat | High | Fix reported |