| Package | Affected versions | Patched versions |
|---|---|---|
| helm.sh/helm/v3 | < 3.17.3 | 3.17.3 |
| helm | < 3.17.3 | 3.17.3 |
A Helm contributor discovered that a specially crafted JSON Schema within a chart can lead to a stack overflow.
A JSON Schema file within a chart can be crafted with a deeply nested chain of references, leading to parser recursion that can exceed the stack size limit and trigger a stack overflow.
This issue has been resolved in Helm v3.17.3.
Ensure that the JSON Schema within any charts loaded by Helm does not have a large number of nested references. These JSON Schema files are larger than 10 MiB.
Helm's security policy is spelled out in detail in our SECURITY document.
Disclosed by Jakub Ciolek at AlphaSense.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free