Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Helm can mishandle hostnames, risking service interruption

published 8 months ago
Summary

The Helm tool used for managing applications has several flaws that can misinterpret or reject host names. This could allow an attacker to cause deployment failures or gain unintended access to your environment. Install the latest Helm update as soon as possible to protect your systems.

What to do
  • Update cleanstart helm to version 4.0.1-r0.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart helm < 4.0.1-r0
Fix: upgrade to 4.0.1-r0
Original advisory text
Within HostnameError
Multiple security vulnerabilities affect the helm package. Within HostnameError. See references for individual vulnerability details.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.8 Critical
Timeline
Published24 Feb 2026
Updated9 Sep 2026
First seen9 Sep 2026
Sources
CLEANSTART-2026-HW19594 · OSV
Track software like this
Free during beta