CVE-2019-25210

CVE-2019-25210 affects Cloud Native Computing Foundation (CNCF) Helm through version 3.13.3, where it inadvertently exposes secret values when the --dry-run flag is utilized. This presents a medium severity risk (CVSS 6.5) due to potential unauthorized disclosure of sensitive information, particularly in CI/CD environments where output might be accessible. While the vendor acknowledges this behavior as intentional for backward compatibility, it poses a significant confidentiality concern. There is no evidence of active exploitation, public exploit code, or Metasploit/Nuclei modules, though it has garnered some community discussion.