Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-55199

23
FAUCET Score

CVE-2025-55199 affects Helm, a Kubernetes package manager, allowing specially crafted JSON Schema files to trigger an out-of-memory condition. This vulnerability has a CVSS score of 6.5 (Medium) due to its potential for denial of service (availability impact) via a network attack requiring user interaction. While a fix is available in Helm 3.18.5 and a workaround exists, there is currently no evidence of active exploitation, public exploit code, or significant community discussion.

Impacted Technologies

VendorProductVersion(s)CPE
< 3.18.5CPE matchmatch criteria
cpe:2.3:a:helm:helm:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

6.5MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
2.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.33%
Probability of exploitation in next 30 days
EPSS Percentile
25.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0033 is in the 26th percentile among its peer group of 26,219 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (97)

github_advisorypatch availablevia nvd_reference
View patch
gopatch availablevia ghsa
Product: helm.sh/helm/v3Fixed in: 3.18.5
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.2Fixed in: openshift4/ose-console-rhel9:sha256:b8a70037384238ad8eb737ba5e2800ec7abce087aa1b7058982c4ee959d9c5a3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.21Fixed in: openshift4/ose-console-rhel9:sha256:33afbf29add637cae8478b8e0ef6b3b465e4ee53b000467ec34fb1f3a04615af
View patch
redhatvendor investigatingvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/addon-manager-rhel9
redhatvendor investigatingvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/backplane-rhel8-operator
redhatvendor investigatingvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/backplane-rhel9-operator
redhatvendor investigatingvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/cluster-proxy-rhel8
redhatvendor investigatingvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/cluster-proxy-rhel9
redhatvendor investigatingvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/hypershift-addon-rhel8-operator
redhatvendor investigatingvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/hypershift-addon-rhel9-operator
redhatvendor investigatingvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/managedcluster-import-controller-rhel8
redhatvendor investigatingvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/managedcluster-import-controller-rhel9
redhatvendor investigatingvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/managed-serviceaccount-rhel8
redhatvendor investigatingvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/managed-serviceaccount-rhel9
redhatvendor investigatingvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/multicloud-manager-rhel8
redhatvendor investigatingvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/multicloud-manager-rhel9
redhatvendor investigatingvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/placement-rhel8
redhatvendor investigatingvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/placement-rhel9
redhatvendor investigatingvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/registration-operator-rhel8
redhatvendor investigatingvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/registration-operator-rhel9
redhatvendor investigatingvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/registration-rhel9
redhatvendor investigatingvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/work-rhel8
redhatvendor investigatingvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/work-rhel9
redhatvendor investigatingvia redhat_api
Product: Multicluster Global HubFixed in: multicluster-globalhub/multicluster-globalhub-agent-rhel9
redhatvendor investigatingvia redhat_api
Product: Multicluster Global HubFixed in: multicluster-globalhub/multicluster-globalhub-manager-rhel9
redhatvendor investigatingvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/registration-rhel8
redhatvendor investigatingvia redhat_api
Product: Deployment Validation OperatorFixed in: dvo/deployment-validation-rhel8-operator
redhatvendor investigatingvia redhat_api
Product: Migration Toolkit for Applications 7Fixed in: mta/mta-cli-rhel9
redhatvendor investigatingvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/addon-manager-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/multiclusterhub-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/multicluster-operators-channel-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/multicluster-operators-subscription-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Build of KueueFixed in: kueue/kueue-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-kueue-controller-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-kueue-controller-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/cnf-tests-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/kube-compare-artifacts-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/metallb-rhel8-operator
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/metallb-rhel9-operator
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/oc-mirror-plugin-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/oc-mirror-plugin-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-ansible-operator
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-ansible-rhel9-operator
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-cluster-olm-operator-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-cluster-olm-rhel9-operator
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-helm-operator
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-helm-rhel9-operator
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-olm-catalogd-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-olm-catalogd-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-olm-rukpak-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-olm-rukpak-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-operator-sdk-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-operator-sdk-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ztp-site-generate-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat Openshift Data Foundation 4Fixed in: odf4/odf-csi-addons-rhel9-operator
redhatvendor investigatingvia redhat_api
Product: Red Hat Openshift Data Foundation 4Fixed in: odf4/odf-csi-addons-sidecar-rhel9
redhatvendor investigatingvia redhat_api
Product: Multicluster Global HubFixed in: multicluster-globalhub/multicluster-globalhub-rhel9-operator
redhatvendor investigatingvia redhat_api
Product: OpenShift Service Mesh 3Fixed in: openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9
redhatvendor investigatingvia redhat_api
Product: OpenShift Service Mesh 3Fixed in: openshift-service-mesh/istio-cni-rhel9
redhatvendor investigatingvia redhat_api
Product: OpenShift Service Mesh 3Fixed in: openshift-service-mesh/istio-must-gather-rhel9
redhatvendor investigatingvia redhat_api
Product: OpenShift Service Mesh 3Fixed in: openshift-service-mesh/istio-pilot-rhel9
redhatvendor investigatingvia redhat_api
Product: OpenShift Service Mesh 3Fixed in: openshift-service-mesh/istio-proxyv2-rhel9
redhatvendor investigatingvia redhat_api
Product: OpenShift Service Mesh 3Fixed in: openshift-service-mesh/istio-rhel9-operator
redhatvendor investigatingvia redhat_api
Product: OpenShift Service Mesh 3Fixed in: openshift-service-mesh/istio-sail-operator-bundle
redhatvendor investigatingvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/acm-governance-policy-addon-controller-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/acm-multicluster-observability-addon-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/acm-search-v2-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/acm-volsync-addon-controller-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/multicloud-integrations-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-console
redhatend of lifevia redhat_api
Product: Red Hat Trusted Application PipelineFixed in: rhtap-cli/rhtap-cli-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Dev SpacesFixed in: devspaces/configbump-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Dev SpacesFixed in: devspaces/dashboard-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Dev SpacesFixed in: devspaces/devspaces-operator-bundle
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Dev SpacesFixed in: devspaces/devspaces-rhel9-operator
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Dev SpacesFixed in: devspaces/imagepuller-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Dev SpacesFixed in: devspaces-tech-preview/jetbrains-ide-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Dev SpacesFixed in: devspaces/traefik-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Dev SpacesFixed in: devspaces/udi-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/argocd-agent-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/argocd-extensions-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/argocd-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/argocd-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/argo-rollouts-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/console-plugin-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Security 4Fixed in: advanced-cluster-security/rhacs-central-db-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Security 4Fixed in: advanced-cluster-security/rhacs-main-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Security 4Fixed in: advanced-cluster-security/rhacs-rhel8-operator
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Security 4Fixed in: advanced-cluster-security/rhacs-roxctl-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Security 4Fixed in: advanced-cluster-security/rhacs-scanner-v4-db-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Security 4Fixed in: advanced-cluster-security/rhacs-scanner-v4-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/dex-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/gitops-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/gitops-rhel8-operator
redhatend of lifevia redhat_api
Product: Multicluster Global HubFixed in: multicluster-globalhub/multicluster-globalhub-operator-bundle
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/must-gather-rhel8

Vendor Advisories (3)

goGHSA-9h84-qmv7-982pmedium

Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion

Aug 14, 2025
redhatCVE-2025-55199Moderate

helm.sh/helm/v3: Helm Chart JSON Schema Denial of Service

Aug 13, 2025
microsoft2025-Aug/CVE-2025-55199

Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion

Aug 12, 2025

References

github.com / helm/helm/commit/b78692c18f0fb38fe5ba4571a674de067a4c53a5
Patch
github.com / helm/helm/security/advisories/GHSA-9h84-qmv7-982p
Third Party Advisory