Executive brief
Helm vulnerable to Code Injection through malicious chart.yaml content in helm.sh/helm
Affected products
- Go helm.sh/helm/v3
Junglewise Threat Intelligence
CVE-2025-53547: GO-2025-3802 - Helm vulnerable to Code Injection through malicious chart.yaml content in helm.sh/helm
CVE-2025-53547 · Severity: low · CVSS 3.1 · Published 2025-07-21
Technologies: helm.sh/helm/v3 (Go). Vendors: Go.
Related threats
- Helm path traversal via Chart.yaml name dot-segment
- GO-2025-3888 - Helm May Panic Due To Incorrect YAML Content in helm.sh/helm
- GO-2025-3887 - Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion in helm.sh/helm
- GO-2025-3602 - Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow in helm.sh/helm
- GO-2025-3601 - Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination in helm.sh/helm