Patchfirst
Patchfirst
ChainhelmGo:helm.sh/helm/v3

helm: successive fixes (2020–2024)

7 CVEs over 3 generations, 24 Apr 2020 to 21 Feb 2024.

Family tree

Left to right by publication date.Oldest first. Select a CVE to open it.
  1. CVE-2020-1101324 Apr 2020 First in the chain
  2. CVE-2021-213035 Feb 2021 No direct link to an earlier CVE
  3. CVE-2021-3269016 Jun 2021 related to CVE-2021-21303related to CVE-2020-11013
  4. CVE-2022-2352515 Dec 2022 related to CVE-2021-21303
  5. CVE-2023-251658 Feb 2023 related to CVE-2020-11013related to CVE-2021-32690and 1 more
  6. CVE-2024-2562014 Feb 2024 related to CVE-2021-21303next fix after CVE-2023-25165
  7. CVE-2024-2614721 Feb 2024 related to CVE-2021-21303related to CVE-2022-23525and 1 more
Apr 2020Jan 2021AprJulOct 2022Jan 2023AprJan 2024 CVE-2021-21303 → CVE-2021-32690: related (high confidence)CVE-2020-11013 → CVE-2021-32690: related (medium confidence)CVE-2020-11013 → CVE-2023-25165: related (medium confidence)CVE-2021-21303 → CVE-2022-23525: related (medium confidence)CVE-2021-21303 → CVE-2024-25620: related (medium confidence)CVE-2021-21303 → CVE-2024-26147: related (medium confidence)CVE-2021-32690 → CVE-2023-25165: related (medium confidence)CVE-2022-23525 → CVE-2024-26147: related (medium confidence)CVE-2022-23525 → CVE-2023-25165: Next fix in the same package (low confidence)CVE-2023-25165 → CVE-2024-25620: Next fix in the same package (low confidence)CVE-2024-25620 → CVE-2024-26147: Next fix in the same package (low confidence) CVE-2020-11013 24 Apr 2020 CVE-2021-21303 5 Feb 2021 CVE-2021-32690 16 Jun 2021 CVE-2022-23525 15 Dec 2022 CVE-2023-25165 8 Feb 2023 CVE-2024-25620 14 Feb 2024 CVE-2024-26147 21 Feb 2024 Apr 2020JulOctJan 2021AprJulJan 2022OctJan 2023AprJulOctJan 2024 CVE-2021-21303 → CVE-2021-32690: related (high confidence)CVE-2020-11013 → CVE-2021-32690: related (medium confidence)CVE-2020-11013 → CVE-2023-25165: related (medium confidence)CVE-2021-21303 → CVE-2022-23525: related (medium confidence)CVE-2021-21303 → CVE-2024-25620: related (medium confidence)CVE-2021-21303 → CVE-2024-26147: related (medium confidence)CVE-2021-32690 → CVE-2023-25165: related (medium confidence)CVE-2022-23525 → CVE-2024-26147: related (medium confidence)CVE-2022-23525 → CVE-2023-25165: Next fix in the same package (low confidence)CVE-2023-25165 → CVE-2024-25620: Next fix in the same package (low confidence)CVE-2024-25620 → CVE-2024-26147: Next fix in the same package (low confidence) CVE-2020-11013 24 Apr 2020 CVE-2021-21303 5 Feb 2021 CVE-2021-32690 16 Jun 2021 CVE-2022-23525 15 Dec 2022 CVE-2023-25165 8 Feb 2023 CVE-2024-25620 14 Feb 2024 CVE-2024-26147 21 Feb 2024
Exploited in the wild (CISA KEV) Not in KEV Priority score (0 to 100) High confidence Medium Low

CVEs in this family

Table view of the tree
CVEPublishedTitleLinked fromPriority
CVE-2020-11013 24 Apr 2020 lookup Function Information Discolosure in Helm · fixed in 3.1.3 First in chain 20.5
CVE-2021-21303 5 Feb 2021 Injection attack in Helm · fixed in 3.5.2 First in chain 17.1
CVE-2021-32690 16 Jun 2021 Repository credentials passed to alternate domain · fixed in 3.6.1 CVE-2021-21303 · related · High 19.4
CVE-2022-23525 15 Dec 2022 Helm vulnerable to Denial of service via NULL Pointer Dereference · fixed in 3.10.3 CVE-2021-21303 · related · Medium 15.6
CVE-2023-25165 8 Feb 2023 getHostByName Function Information Disclosure · fixed in 3.11.1 CVE-2020-11013 · related · Medium 14.1
CVE-2024-25620 14 Feb 2024 Dependency management path traversal in helm · fixed in 3.14.1 CVE-2021-21303 · related · Medium 13.9
CVE-2024-26147 21 Feb 2024 Helm's Missing YAML Content Leads To Panic · fixed in 3.14.2 CVE-2021-21303 · related · Medium 17.3
↑ ↓ chooseEnter openEsc close