Executive brief
Helm Unsafe Link Following in helm.sh/helm
Affected products
- Go helm.sh/helm
Junglewise Threat Intelligence
CVE-2019-18658: GO-2023-1938 - Helm Unsafe Link Following in helm.sh/helm
CVE-2019-18658 · Severity: low · CVSS 3.1 · Published 2024-08-20
Technologies: helm.sh/helm (Go). Vendors: Go.
Related threats
- GO-2025-3888 - Helm May Panic Due To Incorrect YAML Content in helm.sh/helm
- GO-2025-3887 - Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion in helm.sh/helm
- GO-2023-1993 - Helm Improper Certificate Validation in helm.sh/helm
- GO-2023-1948 - Helm Path Traversal in helm.sh/helm
- plugin.yaml file allows for duplicate entries in helm