CVE-2020-15185Low· 2.2▾ SunlitRepository index file allows for duplicates of the same chart entry in helm
▾ Sunlit zone — Low / medium · no exploitation signal
impact 12.1 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 9.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
0.9%
During a security audit of Helm's code base, security researchers at Trail of Bits identified a bug in which the a Helm repository can contain duplicates of the same chart, with the last one always used. If a repository is compromised, this lowers the level of access that an attacker needs to inject a bad chart into a repository.
To perform this attack, an attacker must have write access to the index file (which can occur during a MITM attack on a non-SSL connection).
helm.sh/helm/v3/pkg/repo
This issue has been patched in Helm 3.3.2 and 2.16.11
helm pull to fetch the chart, then review the chart’s content (either manually, or with helm verify if it has been signed) to ensure it has not been tampered withhelm.sh/helm/v3 >= 3.0.0, < 3.3.2helm.sh/helm < 2.16.11Upgrade to a patched release:
helm.sh/helm/v3 3.3.2helm.sh/helm 2.16.11Connected by shared product, vendor, weakness, or advisory.
CVE-2020-15187Low· 3.0plugin.yaml file allows for duplicate entries in helm
CVE-2020-15184Low· 3.7Aliases are never checked in helm
CVE-2022-36055Medium· 6.5Helm Vulnerable to denial of service through string value parsing
CVE-2025-32387Medium· 6.5Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow
CVE-2025-32386Medium· 6.5Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination
CVE-2020-4053Low· 3.7Plugin archive directory traversal in Helm