Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestions search

With package: python313Packages.tree-sitter-grammars.tree-sitter-go-template-helm

Found 3 matching suggestions

View:
Compact
Detailed
created 5 days, 16 hours ago
Helm's plugin verification fails open when .prov is missing, allowing unsigned plugin install

Helm is a package manager for Charts for Kubernetes. From 4.0.0 to 4.1.3, Helm will install plugins missing provenance (.prov file) when signature verification is required. This vulnerability is fixed in 4.1.4.

Affected products

helm
  • ==>= 4.0.0, < 4.1.4

Matching in nixpkgs

pkgs.helm

Free, cross-platform, polyphonic synthesizer

pkgs.helmfile

Declarative spec for deploying Helm charts

pkgs.helmsman

Helm Charts (k8s applications) as Code tool

pkgs.helm-docs

Tool for automatically generating markdown documentation for Helm charts

pkgs.helmholtz

Time domain pitch tracker for Pure Data

  • nixos-unstable 1.0
    • nixpkgs-unstable 1.0
    • nixos-unstable-small 1.0
  • nixos-25.11 -
    • nixos-25.11-small
    • nixpkgs-25.11-darwin
created 5 days, 16 hours ago
Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment

Helm is a package manager for Charts for Kubernetes. In Helm versions <=3.20.1 and <=4.1.3, a specially crafted Chart will cause helm pull --untar [chart URL | repo/chartname] to write the Chart's contents to the immediate output directory (as defaulted to the current working directory; or as given by the --destination and --untardir flags), rather than the expected output directory suffixed by the chart's name. This vulnerability is fixed in 3.20.2 and 4.1.4.

Affected products

helm
  • ==>= 4.0.0, < 4.1.4
  • ==< 3.20.2

Matching in nixpkgs

pkgs.helm

Free, cross-platform, polyphonic synthesizer

pkgs.helmfile

Declarative spec for deploying Helm charts

pkgs.helmsman

Helm Charts (k8s applications) as Code tool

pkgs.helm-docs

Tool for automatically generating markdown documentation for Helm charts

pkgs.helmholtz

Time domain pitch tracker for Pure Data

  • nixos-unstable 1.0
    • nixpkgs-unstable 1.0
    • nixos-unstable-small 1.0
  • nixos-25.11 -
    • nixos-25.11-small
    • nixpkgs-25.11-darwin
created 5 days, 16 hours ago
Helm has a path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory

Helm is a package manager for Charts for Kubernetes. From 4.0.0 to 4.1.3, a specially crafted Helm plugin, when installed or updated, will cause Helm to write the contents of the plugin to an arbitrary filesystem location. To prevent this, validate that the plugin.yaml of the Helm plugin does not include a version: field containing POSIX dot-dot path separators ie. "/../". This vulnerability is fixed in 4.1.4.

Affected products

helm
  • ==>= 4.0.0, < 4.1.4

Matching in nixpkgs

pkgs.helm

Free, cross-platform, polyphonic synthesizer

pkgs.helmfile

Declarative spec for deploying Helm charts

pkgs.helmsman

Helm Charts (k8s applications) as Code tool

pkgs.helm-docs

Tool for automatically generating markdown documentation for Helm charts

pkgs.helmholtz

Time domain pitch tracker for Pure Data

  • nixos-unstable 1.0
    • nixpkgs-unstable 1.0
    • nixos-unstable-small 1.0
  • nixos-25.11 -
    • nixos-25.11-small
    • nixpkgs-25.11-darwin