Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-55199

Опубликовано: 14 авг. 2025
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory (OOM) termination. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring all Helm charts that are being loaded into Helm do not have any reference of $ref pointing to /dev/zero.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:helm:helm:*:*:*:*:*:*:*:*
Версия до 3.18.5 (исключая)

EPSS

Процентиль: 1%
0.00012
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVSS3: 6.5
redhat
6 месяцев назад

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory (OOM) termination. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring all Helm charts that are being loaded into Helm do not have any reference of $ref pointing to /dev/zero.

msrc
5 месяцев назад

Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion

CVSS3: 6.5
debian
6 месяцев назад

Helm is a package manager for Charts for Kubernetes. Prior to version ...

CVSS3: 6.5
github
6 месяцев назад

Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion

CVSS3: 6.5
fstec
6 месяцев назад

Уязвимость пакетного менеджера для Kubernetes Helm, связанная с распределением ресурсов без ограничений и регулирования, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 1%
0.00012
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-770