/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-hhjm-xw7g-52g6

Published

Last updated

https://images.chainguard.dev/security/CGA-hhjm-xw7g-52g6
Package

rancher-helm-3

RepositoryWolfi
Latest Update
Pending upstream fix
Aliases
  • CVE-2025-32386
  • GHSA-4hfp-h4cw-hj8p

Severity

Unknown

References

  • https://nvd.nist.gov/vuln/detail/CVE-2025-32386

Updates

Status

Pending upstream fix

Impact

This CVE is fixed in upstream Helm but not yet in Rancher Helm. Due to differences in file structure and code organization, the upstream patch doesn't apply cleanly. Rancher Helm needs to create a custom patch to address the issue. Details on the upstream fix: https://github.com/helm/helm/commit/d8ca55fc669645c10c0681d49723f4bb8c0b1ce7

Status

Under investigation


Safe Source for Open Sourceâ„¢
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing