Helm Chart extraction output directory collapse via Chart.yaml name dot-segment in helm.sh/helm
Helm Chart extraction output directory collapse via Chart.yaml name dot-segment in helm.sh/helm
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-35206US | medium4.4 | — | ||
Helm is a package manager for Charts for Kubernetes. In Helm versions <=3.20.1 and <=4.1.3, a specially crafted Chart will cause helm pull --untar [chart URL | repo/chartname] to… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan