Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-53547

27
FAUCET Score

CVE-2025-53547 is a local code execution vulnerability affecting Helm, the package manager for Kubernetes Charts, prior to version 3.18.4. A specially crafted Chart.yaml and symlinked Chart.lock file can lead to arbitrary code execution when dependencies are updated. This vulnerability carries a CVSS score of 8.6 (HIGH), indicating a severe risk with potential for high impact on confidentiality, integrity, and availability, requiring user interaction and local access. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion beyond a single mention. The vulnerability has been patched in Helm v3.18.4.

Impacted Technologies

VendorProductVersion(s)CPE
< 3.17.4CPE matchmatch criteria
cpe:2.3:a:helm:helm:*:*:*:*:*:*:*:*
>= 3.18.0, < 3.18.4CPE matchmatch criteria
cpe:2.3:a:helm:helm:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

8.5HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
6.0
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.37%
Probability of exploitation in next 30 days
EPSS Percentile
29.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0037 is in the 28th percentile among its peer group of 11,617 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (197)

github_advisorypatch availablevia nvd_reference
View patch
gopatch availablevia ghsa
Product: helm.sh/helm/v3Fixed in: 3.17.4
gopatch availablevia ghsa
Product: helm.sh/helm/v3Fixed in: 3.18.4
microsoftpatch availablevia msrc
Product: cbl2 helm 3.14.2-6 on CBL Mariner 2.0Fixed in: 3.14.2-7
microsoftpatch availablevia msrc
Product: cm2 helm 3.14.2-7 on CBL Mariner 2.0Fixed in: 3.14.2-7
microsoftpatch availablevia msrc
Product: 19963-17086Fixed in: 3.14.2-7
microsoftpatch availablevia msrc
Product: 19575-16823Fixed in: 3.14.2-7
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-assisted-service-9-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-cluster-api-provider-agent-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-cluster-api-provider-kubevirt-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine/cluster-api-rhel9:v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-clusterclaims-controller-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-cluster-curator-controller-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-cluster-image-set-controller-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-clusterlifecycle-state-metrics-container-v2.7.6-4
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-cluster-proxy-addon-container-v2.7.6-4
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-cluster-proxy-container-v2.7.6-4
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-console-mce-container-v2.7.6-4
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-discovery-operator-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-hive-container-v2.7.6-4
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-hypershift-addon-operator-container-v2.7.6-4
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-hypershift-cli-container-v2.7.6-4
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-hypershift-operator-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-image-based-install-container-v2.7.6-11
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-kube-rbac-proxy-mce-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-managedcluster-import-controller-container-v2.7.6-4
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-managed-serviceaccount-container-v2.7.6-4
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-multicloud-manager-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-must-gather-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-operator-bundle-container-v2.7.6-9
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-operator-container-v2.7.6-5
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-placement-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-provider-credential-controller-container-v2.7.6-4
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-registration-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-registration-operator-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-work-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-cli-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-cluster-permission-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-governance-policy-addon-controller-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-governance-policy-framework-addon-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-grafana-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-multicluster-observability-addon-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-must-gather-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-operator-bundle-container-v2.12.5-9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-prometheus-config-reloader-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-prometheus-operator-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-search-indexer-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-search-v2-api-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-search-v2-operator-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-siteconfig-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-volsync-addon-controller-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: cert-policy-controller-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: cluster-backup-operator-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: config-policy-controller-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: console-container-v2.12.5-5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: endpoint-monitoring-operator-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: governance-policy-propagator-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: grafana-dashboard-loader-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: insights-client-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: insights-metrics-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: klusterlet-addon-controller-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: kube-rbac-proxy-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: kube-state-metrics-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: memcached-exporter-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: metrics-collector-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: multicloud-integrations-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: multiclusterhub-operator-container-v2.12.5-5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: multicluster-observability-operator-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: multicluster-operators-application-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: multicluster-operators-channel-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: multicluster-operators-subscription-operator-container-v2.12.5-5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: node-exporter-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: observatorium-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: observatorium-operator-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: prometheus-alertmanager-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: prometheus-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: rbac-query-proxy-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: rhacm2/memcached-rhel9:v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: search-collector-container-v2.12.5-5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: submariner-addon-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: thanos-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: thanos-receive-controller-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: acm-cli-container-v2.13.4-14
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: acm-cluster-permission-container-v2.13.4-11
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: acm-governance-policy-addon-controller-container-v2.13.4-12
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: acm-governance-policy-framework-addon-container-v2.13.4-13
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: acm-grafana-container-v2.13.4-11
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: acm-multicluster-observability-addon-container-v2.13.4-14
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: acm-must-gather-container-v2.13.4-13
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: acm-operator-bundle-container-v2.13.4-22
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: acm-prometheus-config-reloader-container-v2.13.4-7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: acm-prometheus-operator-container-v2.13.4-7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: acm-search-indexer-container-v2.13.4-12
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: acm-search-v2-api-container-v2.13.4-11
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: acm-search-v2-operator-container-v2.13.4-11
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: acm-siteconfig-container-v2.13.4-9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: acm-volsync-addon-controller-container-v2.13.4-9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: cert-policy-controller-container-v2.13.4-13
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: cluster-backup-operator-container-v2.13.4-11
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: config-policy-controller-container-v2.13.4-13
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: console-container-v2.13.4-13
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: endpoint-monitoring-operator-container-v2.13.4-8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: governance-policy-propagator-container-v2.13.4-12
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: grafana-dashboard-loader-container-v2.13.4-8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: insights-client-container-v2.13.4-11
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: insights-metrics-container-v2.13.4-11
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: klusterlet-addon-controller-container-v2.13.4-10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: kube-rbac-proxy-container-v2.13.4-10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: kube-state-metrics-container-v2.13.4-12
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: memcached-exporter-container-v2.13.4-7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: metrics-collector-container-v2.13.4-8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: multicloud-integrations-container-v2.13.4-9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: multiclusterhub-operator-container-v2.13.4-12
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: multicluster-observability-operator-container-v2.13.4-8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: multicluster-operators-application-container-v2.13.4-8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: multicluster-operators-channel-container-v2.13.4-8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: multicluster-operators-subscription-operator-container-v2.13.4-11
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: node-exporter-container-v2.13.4-8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: observatorium-container-v2.13.4-8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: observatorium-operator-container-v2.13.4-13
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: prometheus-alertmanager-container-v2.13.4-7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: prometheus-container-v2.13.4-9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: rbac-query-proxy-container-v2.13.4-8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: rhacm2/acm-flightctl-api-rhel9:v2.13.4-11
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: rhacm2/acm-flightctl-ocp-ui-rhel9:v2.13.4-10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: rhacm2/acm-flightctl-periodic-rhel9:v2.13.4-11
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: rhacm2/acm-flightctl-ui-rhel9:v2.13.4-10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: rhacm2/acm-flightctl-worker-rhel9:v2.13.4-11
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: rhacm2/memcached-rhel9:v2.13.4-11
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: search-collector-container-v2.13.4-11
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: submariner-addon-container-v2.13.4-11
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: thanos-container-v2.13.4-11
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed in: thanos-receive-controller-container-v2.13.4-11
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12Fixed in: rhacm2/acm-volsync-addon-controller-rhel9:sha256:c855c174a46f2aa6dedb58e6f14c6ec3314c0f00a30324b47ea9dbf8a718a7d1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.14Fixed in: rhacm2/acm-volsync-addon-controller-rhel9:sha256:0fcfb11a3e8fd162b15b81bb5133549e8f21139ade68e4a66f0d1f216edc09bc
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.14Fixed in: rhacm2/multicloud-integrations-rhel9:sha256:b7c30d0c5e9255d6b10fc625206faf87e2a783cc34d16686245213a105462902
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.14Fixed in: rhacm2/multicluster-operators-channel-rhel9:sha256:930e2fc73ea1a5076dfcfeaee276706e56ec7ff5702796eae37f60b1e479f201
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.14Fixed in: rhacm2/multicluster-operators-subscription-rhel9:sha256:ebceb3b171511aaf1879d1dbc0317a8b442907a4543296f98ac7b95a666a7007
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.12Fixed in: openshift4/ose-operator-sdk-rhel8:sha256:863a9233aefd67002705c85691eb74452d7a41dfcf72423dff251dc652338160
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.13Fixed in: openshift4/ose-operator-sdk-rhel8:sha256:fc897ed2d1d89a346995121242f7da7d97dbb031f60db193015066aba49e086b
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ztp-site-generate-rhel8:sha256:6f2a3800843763cf34d412bfcdba4a8e4cdc6d48b5444b7bdf85a0d4fe412c19
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-operator-sdk-rhel8:sha256:dd6cbe798e84277a9145c3f944ac15058ee9f48b66353c83b7c6af92c78f138a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-operator-sdk-rhel8:sha256:4a21a76877c56a9f7ddc1eaa6dd5b0c01f66197e05d865d7dc60dd3eb6674c72
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.16Fixed in: openshift4/ztp-site-generate-rhel8:sha256:380bf78c3effa9d716ded177f82246e456613ccfb27c7a75ddcdfa6426459fe8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.16Fixed in: openshift4/ose-operator-sdk-rhel9:sha256:0db4c40580bab21ab06da9f657eeba182cfa215c0134a738630ab7b88ec29717
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.17Fixed in: openshift4/ose-operator-sdk-rhel9:sha256:b4d145dd4c58c63855b4b723e38a67a50eef2520cf8c55e644c38deea07d532e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.18Fixed in: openshift4/ztp-site-generate-rhel8:sha256:0805f90c4a1bd0de2c2825865e1092c1568b01a97ed4a26a47283293d7fe9108
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.18Fixed in: openshift4/ose-operator-sdk-rhel9:sha256:9bd1542fe9e295763ae5f486495ba36a4a76d69ed750adacad875b7ad07e9e10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.19Fixed in: openshift4/ztp-site-generate-rhel8:sha256:a26870f0981a8f939a0ec7e2cbf794f3f4b7121802474a79570bdb44e61e2a2a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.2Fixed in: openshift4/oc-mirror-plugin-rhel9:sha256:8d5860c21b8b687adaaa6920efa69d90fdf85721e8d1881e23d97671dd4351a1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.2Fixed in: openshift4/ose-cluster-olm-rhel9-operator:sha256:dfc1657702213b866a4308d60898adfc6f2fd508690511f5b92afcb7fffdcc48
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.2Fixed in: openshift4/ose-console-rhel9:sha256:ed9d709c3e216a5cdccce5892447460442acebb33c411ea2f99a2680abb0ff50
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.2Fixed in: openshift4/ose-olm-catalogd-rhel9:sha256:b641830b0d5c6c508d101f0c41106969746c15cfbefd651a1f5ae581bffaad6e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.17Fixed in: openshift4/ztp-site-generate-rhel8:sha256:d81f6e3975f5cf326cbaf3fff41774f2f4e70dedb7aada0c73053a638251c16a
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 8Fixed in: multicluster-engine-assisted-service-8-container-v2.7.6-2
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-addon-manager-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-assisted-image-service-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-assisted-installer-agent-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-assisted-installer-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-assisted-installer-controller-container-v2.7.6-3
View patch
redhatno patchvia redhat_api
Product: Migration Toolkit for Applications 7Fixed in: mta/mta-cli-rhel9
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/cluster-proxy-rhel9
redhatno patchvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/acm-search-v2-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-cluster-olm-operator-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-console
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-olm-rukpak-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-olm-rukpak-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/argo-rollouts-rhel8
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/addon-manager-rhel9
redhatno patchvia redhat_api
Product: Deployment Validation OperatorFixed in: dvo/deployment-validation-rhel8-operator
redhatno patchvia redhat_api
Product: Deployment Validation OperatorFixed in: dvo/deployment-validation-operator-bundle
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/cluster-proxy-rhel8
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/managedcluster-import-controller-rhel8
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/managedcluster-import-controller-rhel9
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/managed-serviceaccount-rhel8
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/managed-serviceaccount-rhel9
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/multicloud-manager-rhel8
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/multicloud-manager-rhel9
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/placement-rhel8
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/placement-rhel9
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/registration-operator-rhel8
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/registration-operator-rhel9
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/registration-rhel8
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/registration-rhel9
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/work-rhel8
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/work-rhel9
redhatno patchvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/acm-multicluster-observability-addon-rhel9
redhatend of lifevia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/hypershift-addon-rhel8-operator
redhatend of lifevia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/hypershift-addon-rhel9-operator
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/oc-mirror-plugin-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/dex-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/gitops-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/gitops-rhel8-operator
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/must-gather-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/argocd-extensions-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Trusted Application PipelineFixed in: rhtap-cli/rhtap-cli-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/console-plugin-rhel8

Vendor Advisories (3)

goGHSA-557j-xg8c-q2mmhigh

Helm vulnerable to Code Injection through malicious chart.yaml content

Jul 8, 2025
redhatCVE-2025-53547Important

helm.sh/helm/v3: Helm Chart Code Execution

Jul 8, 2025
microsoft2025-Jul/CVE-2025-53547Important

Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution

Jul 8, 2025

References

news.ycombinator.com / item
Issue Tracking
github.com / helm/helm/commit/4b8e61093d8f579f1165cdc6bd4b43fa5455f571
Patch
github.com / helm/helm/security/advisories/GHSA-557j-xg8c-q2mm
Third Party Advisory