Skip to content
Heist/ feed

Security feed

HighFix available

Security update for helm

Type: advisorySource: OSV

This update for helm fixes the following issues: - CVE-2026-85731: oras.land/oras-go/v2: arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (bsc#1281104). - CVE-2026-85732: oras.la…

UnratedFix available

Security update for helm

Type: advisorySource: OSV

This update for helm fixes the following issues: - CVE-2026-84303: github.com/grpc/grpc-go: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header…

Products: helm
UnratedFix available

Security update for helm

Type: advisorySource: OSV

This update for helm fixes the following issues: Update to version 3.21.1: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-…

Products: helm, helm
UnratedFix available

Security update for helm

Type: advisorySource: OSV

This update for helm fixes the following issues: - CVE-2026-84303: github.com/grpc/grpc-go: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header…

Products: helm
UnratedFix available

Security update for helm

Type: advisorySource: OSV

This update for helm fixes the following issues: Update to version 3.20.2. Security issued fixed: - CVE-2025-55199: specially crafted JSON Schema can lead to out of memory (OOM) termination (bsc#1248093). - CVE-2026-3…

Products: helm, helm