CVE-2025-55199

Name of the Vulnerable Software and Affected Versions: Helm versions prior to 3.18.5

Description: Helm, a package manager for Kubernetes Charts, is susceptible to a denial-of-service issue. A crafted JSON Schema file can cause Helm to exhaust available memory, leading to an out-of-memory (OOM) termination. This occurs when the $ref field in values.schema.json points to a device or problematic file, such as /dev/zero.

Recommendations: Helm versions prior to 3.18.5 should be updated to version 3.18.5 or later. Ensure all Helm charts loaded into Helm do not have any reference of $ref pointing to /dev/zero.