Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-55199

Опубликовано: 14 авг. 2025
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory (OOM) termination. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring all Helm charts that are being loaded into Helm do not have any reference of $ref pointing to /dev/zero.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:helm:helm:*:*:*:*:*:*:*:*
Версия до 3.18.5 (исключая)

EPSS

Процентиль: 2%
0.00015
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVSS3: 6.5
redhat
3 месяца назад

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory (OOM) termination. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring all Helm charts that are being loaded into Helm do not have any reference of $ref pointing to /dev/zero.

msrc
2 месяца назад

Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion

CVSS3: 6.5
debian
3 месяца назад

Helm is a package manager for Charts for Kubernetes. Prior to version ...

CVSS3: 6.5
github
3 месяца назад

Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion

CVSS3: 6.5
fstec
3 месяца назад

Уязвимость пакетного менеджера для Kubernetes Helm, связанная с распределением ресурсов без ограничений и регулирования, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 2%
0.00015
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-770