/

Directory Security Advisories Pricing

Security Advisories

CGA-cp96-3586-hcm2

Published

Last updated

https://images.chainguard.dev/security/CGA-cp96-3586-hcm2

Package

cluster-api-helm-controller-fips

Repository

Chainguard

Latest Update

Pending upstream fix

Aliases

Severity

6.5

Medium

CVSS V3

References

Updates

Status

Pending upstream fix

Impact

Upstream needs to make code changes in order to upgrade helm.sh/helm/v3 to 3.18.4. Pending PR is inflight awaiting upstream approval: https://github.com/kubernetes-sigs/cluster-api-addon-provider-helm/pull/420

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

© 2025 Chainguard. All Rights Reserved.