CGA-hhjm-xw7g-52g6

Published

Last updated

https://images.chainguard.dev/security/CGA-hhjm-xw7g-52g6

Package

rancher-helm-3

RepositoryWolfi

Latest Update

Pending upstream fix

Aliases

CVE-2025-32386
GHSA-4hfp-h4cw-hj8p

Severity

6.5

Medium

CVSS V3

References

https://nvd.nist.gov/vuln/detail/CVE-2025-32386
https://github.com/advisories/GHSA-4hfp-h4cw-hj8p

Updates

Status

Pending upstream fix

Impact

This CVE is fixed in upstream Helm but not yet in Rancher Helm. Due to differences in file structure and code organization, the upstream patch doesn't apply cleanly. Rancher Helm needs to create a custom patch to address the issue. Details on the upstream fix: https://github.com/helm/helm/commit/d8ca55fc669645c10c0681d49723f4bb8c0b1ce7

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

CGA-hhjm-xw7g-52g6

Severity

References

Updates

The trusted source for open source

Product

Solutions

Customers

Resources

Company