CVE-2025-55198
ADVISORY - githubSummary
A Helm contributor discovered an improper validation of type error when parsing Chart.yaml and index.yaml files that can lead to a panic.
Impact
There are two areas of YAML validation that were impacted. First, when a Chart.yaml file had a null maintainer or the child or parent of a dependencies import-values could be parsed as something other than a string, helm lint would panic. Second, when an index.yaml had an empty entry in the list of chart versions Helm would panic on interactions with that repository.
Patches
This issue has been resolved in Helm v3.18.5.
Workarounds
Ensure YAML files are formatted as Helm expects prior to processing them with Helm.
References
Helm's security policy is spelled out in detail in our SECURITY document.
Credits
Disclosed by Jakub Ciolek at AlphaSense.
Common Weakness Enumeration (CWE)
Use of Uninitialized Resource
Use of Uninitialized Resource
Use of Uninitialized Resource
NIST
2.8
CVSS SCORE
6.5mediumGitHub
2.8
CVSS SCORE
6.5mediumAlpine
-
GoLang
-
Bitnami
BIT-helm-2025-55198
2.8
CVSS SCORE
6.5mediumRed Hat
2.8
CVSS SCORE
6.5mediumChainguard
CGA-27xr-r4mc-f6j8
-
Chainguard
CGA-2g5r-xf83-fwp8
-
Chainguard
CGA-2g83-r8pg-x8xg
-
Chainguard
CGA-2h49-vcx4-4q5q
-
Chainguard
CGA-2qqc-8xx3-fx6p
-
Chainguard
CGA-2vvp-phxj-5v4q
-
Chainguard
CGA-34jw-3j7q-xqhf
-
Chainguard
CGA-35g8-jwgh-98m9
-
Chainguard
CGA-3mhw-9g3c-vx76
-
Chainguard
CGA-3r8x-xr4g-gx55
-
Chainguard
CGA-48p5-994q-86px
-
Chainguard
CGA-52qf-vv5w-7pjq
-
Chainguard
CGA-5757-mqjw-49f7
-
Chainguard
CGA-66fw-x3w6-52gr
-
Chainguard
CGA-6q57-5rf8-h5rj
-
Chainguard
CGA-6rgg-hj6c-wxmw
-
Chainguard
CGA-6wgf-fwmj-m3gm
-
Chainguard
CGA-74v7-hm73-7m32
-
Chainguard
CGA-76gp-g69h-882w
-
Chainguard
CGA-7844-p49j-4m4c
-
Chainguard
CGA-7x22-4h3f-3p7f
-
Chainguard
CGA-8237-4cg2-53gc
-
Chainguard
CGA-8ph7-p8h3-2xh2
-
Chainguard
CGA-8x53-r6p3-cj59
-
Chainguard
CGA-9gm5-9mw8-3j89
-
Chainguard
CGA-9pj4-42fj-vmcq
-
Chainguard
CGA-9qfm-q3qf-4qv3
-
Chainguard
CGA-ccjr-8cf6-8pcj
-
Chainguard
CGA-ccmw-mm85-55gj
-
Chainguard
CGA-f5vw-59c8-2ccf
-
Chainguard
CGA-fj3w-2h29-gxmp
-
Chainguard
CGA-fj5r-m3pw-wrc3
-
Chainguard
CGA-g5rp-3jh3-5pm2
-
Chainguard
CGA-g6x3-q3m5-fhcv
-
Chainguard
CGA-g97p-4655-fxpq
-
Chainguard
CGA-gh4w-vw29-v29x
-
Chainguard
CGA-gpmr-v57p-w932
-
Chainguard
CGA-h3f7-3m7h-q5g9
-
Chainguard
CGA-hg2c-2x65-25j6
-
Chainguard
CGA-hjw7-pmj8-9m7q
-
Chainguard
CGA-hq5v-wv9f-8qmp
-
Chainguard
CGA-hq6h-hq8f-v8v3
-
Chainguard
CGA-j34p-2vq7-wgfh
-
Chainguard
CGA-j736-7v34-crpm
-
Chainguard
CGA-j8hq-w5vg-2q29
-
Chainguard
CGA-jmxr-5cfj-c26c
-
Chainguard
CGA-jx2r-f67c-4238
-
Chainguard
CGA-m3g7-38qq-g979
-
Chainguard
CGA-m4m3-rf58-6x8p
-
Chainguard
CGA-m79p-c95w-r857
-
Chainguard
CGA-mf52-vhxh-hjjx
-
Chainguard
CGA-mp4v-hv6m-874f
-
Chainguard
CGA-p4v5-cxq2-p7rh
-
Chainguard
CGA-p5wr-mq87-7p8h
-
Chainguard
CGA-p8w7-g5vh-94r7
-
Chainguard
CGA-pfgr-pcqp-xw3p
-
Chainguard
CGA-pm25-ccgm-4v8c
-
Chainguard
CGA-pv6c-gx2r-v8jj
-
Chainguard
CGA-pvx7-2qq2-5jhq
-
Chainguard
CGA-pw6p-4wvj-72r2
-
Chainguard
CGA-pwhg-p2rf-hjqc
-
Chainguard
CGA-pxh8-8xhq-fwc4
-
Chainguard
CGA-qgj6-7cxm-6j2h
-
Chainguard
CGA-qgpx-5x36-8327
-
Chainguard
CGA-qgrh-8qgc-w3pj
-
Chainguard
CGA-qpc9-jgcv-96gc
-
Chainguard
CGA-qq25-8ww8-7cwc
-
Chainguard
CGA-qx4m-49gh-rjq4
-
Chainguard
CGA-qxqh-j647-x5w3
-
Chainguard
CGA-r3x9-rq5v-m6ph
-
Chainguard
CGA-r97g-qw5p-qx7w
-
Chainguard
CGA-rcxr-8hjp-q8q7
-
Chainguard
CGA-rgvh-w8x5-4w53
-
Chainguard
CGA-vjgj-rg5m-cjcq
-
Chainguard
CGA-vr68-5q99-qpq6
-
Chainguard
CGA-vv7r-cmc5-h4qp
-
Chainguard
CGA-w3m9-rg9g-hg7r
-
Chainguard
CGA-w499-hp98-p53x
-
Chainguard
CGA-w4mg-wfqv-hcmg
-
Chainguard
CGA-w9cp-j2rc-mmcf
-
Chainguard
CGA-wf98-j8fp-xgxh
-
Chainguard
CGA-whr8-gx4q-xfg7
-
Chainguard
CGA-wvfw-722j-4mh5
-
Chainguard
CGA-x8c2-qgcr-r64c
-
Chainguard
CGA-xh9g-vgh5-5p4c
-
minimos
MINI-44wx-j6v6-8gq8
-
minimos
MINI-4r6v-8c5q-hq9c
-
minimos
MINI-779c-f52j-vj2h
-
minimos
MINI-7x54-q3j2-w4pv
-
minimos
MINI-8432-fqwv-2gf8
-
minimos
MINI-8jh5-m4fr-cxjc
-
minimos
MINI-8v54-p2cx-3589
-
minimos
MINI-8vhv-xcgv-g2f8
-
minimos
MINI-9jpj-3qpg-p6f2
-
minimos
MINI-c94p-32rx-jg85
-
minimos
MINI-cvrh-7gvp-w2r9
-
minimos
MINI-f4g9-6g6f-xxcf
-
minimos
MINI-fx7c-78jv-v4pg
-
minimos
MINI-grhm-w2c9-f237
-
minimos
MINI-hrmm-9h8h-jp4c
-
minimos
MINI-jmf7-fjp6-53r8
-
minimos
MINI-jw4g-8pj5-hwhj
-
minimos
MINI-mqhf-x823-qrh5
-
minimos
MINI-r346-85mw-r9h3
-
minimos
MINI-v3r5-6h32-5q4v
-
minimos
MINI-w7pj-q69f-7fjq
-
minimos
MINI-x6p6-rh2x-j9x8
-
minimos
MINI-xrhc-mw27-9v9p
-