PT-2025-15873
CVE-2025-32387
·
Published
2025-04-09
·
Updated
2026-09-18
Description by
CVSS 2.0
7.8
HighMetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions:
Helm versions prior to 3.17.3
Description:
A JSON Schema file within a chart can be crafted with a deeply nested chain of references, leading to parser recursion that can exceed the stack size limit and trigger a stack overflow. This issue was discovered by a Helm contributor.
Recommendations:
For versions prior to 3.17.3, update to Helm v3.17.3 to resolve the issue.
As a temporary workaround, ensure that the JSON Schema within any charts loaded by Helm does not have a large number of nested references, specifically avoiding files larger than 10 MiB.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾