Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2025-55199
Analyzed
More InfoOfficial Page
Source-security-advisories@github.com
View Known Exploited Vulnerability (KEV) details
Published At-14 Aug, 2025 | 00:15
Updated At-21 Aug, 2025 | 21:25

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory (OOM) termination. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring all Helm charts that are being loaded into Helm do not have any reference of $ref pointing to /dev/zero.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.16.5MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CPE Matches
helm
helm
>>helm>>Versions before 3.18.5(exclusive)
cpe:2.3:a:helm:helm:*:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-770Primarysecurity-advisories@github.com
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://github.com/helm/helm/commit/b78692c18f0fb38fe5ba4571a674de067a4c53a5security-advisories@github.com
Patch
https://github.com/helm/helm/security/advisories/GHSA-9h84-qmv7-982psecurity-advisories@github.com
Third Party Advisory
Change History
0Changes found
Details not found