Helm CLI 4.1 vulnerabilities

2 known vulnerabilities in Helm CLI 4.1 from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  helm: Not Failing Securely

  CVE-2026-35205Apr 9, 2026Helm

  Helm is a package manager for Charts for Kubernetes. From 4.0.0 to 4.1.3, Helm will install plugins missing provenance (.prov file) when signature verification is required. This vulnerability is fixed in 4.1.4.

• 8.6 High severity

  helm: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-35204Apr 9, 2026Helm

  Helm is a package manager for Charts for Kubernetes. From 4.0.0 to 4.1.3, a specially crafted Helm plugin, when installed or updated, will cause Helm to write the contents of the plugin to an arbitrary filesystem location. To prevent this, validate that the pl