PT-2025-15873

CVE-2025-32387

·

Published

2025-04-09

·

Updated

2026-09-18

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions: Helm versions prior to 3.17.3
Description: A JSON Schema file within a chart can be crafted with a deeply nested chain of references, leading to parser recursion that can exceed the stack size limit and trigger a stack overflow. This issue was discovered by a Helm contributor.
Recommendations: For versions prior to 3.17.3, update to Helm v3.17.3 to resolve the issue. As a temporary workaround, ensure that the JSON Schema within any charts loaded by Helm does not have a large number of nested references, specifically avoiding files larger than 10 MiB.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-5XQW-8HWV-WG92
AZL-59979
AZL-60172
BIT-HELM-2025-32387
CLEANSTART-2026-WC68837
ECHO-602E-7F74-AFFE
GO-2025-3602
OPENSUSE-SU-2025:14995-1
SUSE-SU-2025:01830-1
SUSE-SU-2025:01830-2
SUSE-SU-2026:3056-1
Found an issue in the description? Have something to add? Feel free to write us 👾