CyberRota Analysis
AI-GeneratedHelm versions up to 4.2.3 are vulnerable to a denial of service attack due to an index out of range panic caused by zero-length byte slices in chart files. This vulnerability can lead to deterministic render failures during various operations, including template rendering and installation. Organizations using Helm for Kubernetes deployments should prioritize patching to mitigate potential disruptions in their CI/CD pipelines.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the Files.Lines template helper in pkg/engine/files.go that allows attackers to trigger an index out of range panic by including zero-length byte slices in chart files. Attackers can include empty files in Helm charts to cause deterministic render failures across template, install, upgrade, lint, and SDK Engine.Render operations.
Related CVEs
Other vulnerabilities affecting the same vendor(s)