CVE-2025-55198
Helm May Panic Due To Incorrect YAML Content
Summary
Helm May Panic Due To Incorrect YAML Content
Original description
The description as published by the source.
Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, when parsing Chart.yaml and index.yaml files, an improper validation of type error can lead to a panic. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring YAML files are formatted as Helm expects prior to processing them with Helm.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
helm
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.18.5"}]}]
References
- advisory github.com
- advisory nvd.nist.gov
- advisory github.com
- patch github.com