Vulnerability Database · Go · Package report
helm.sh/helm/v3: vulnerability history, versions and safety
helm.sh/helm/v3 is a package in the Go ecosystem. Vulert records 38 vulnerabilities for it across 120 releases, from May 2021 to Jul 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.
No patched version yet — these are the ones to plan around.
See the unfixed vulnerabilities →No published version shipped hostile code.
Vulert verdict on helm.sh/helm/v3 v3.22.1 i
Updated on 23 Oct 2026
Action needed: v3.22.1 has 26 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.
- Security Minor issues
- Maintenance Sustainable
- Popularity Key ecosystem project
- Community Active
What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →
- Current release v3.22.1 — affected i
- Vulnerabilities on record 38 over 5 years · 1 in the last year i
- Latest disclosure 24 Jul 2026 i
- Highest CVSS 8.5 i
- With no published fix 1 i
- Stars 30,353 i
- OpenSSF scorecard 8/10 i
- Last release this month i
- Licence Apache-2.0 i
Version list, release dates, licence and dependants published by the Go module proxy, refreshed 22 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for helm.sh/helm/v3, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- v3.22.0-rc.1.0.20261020103835-3ea4647071a7 20 Oct 2026
- v3.22.0-rc.1.0.20261016132304-d1976acc81a7 16 Oct 2026
- v3.22.1 15 Oct 2026
- v3.22.0-rc.1.0.20261015095918-2e1a1273ad55 15 Oct 2026
- v3.22.0-rc.1.0.20261014083258-dda99640b071 14 Oct 2026
- v3.22.0-rc.1.0.20260929131012-585796079ee2 29 Sep 2026
- v3.22.0-rc.1.0.20260927125849-de0c74077848 27 Sep 2026
- v3.22.0-rc.1.0.20260922115726-4113f3639422 22 Sep 2026
- v3.22.0-rc.1.0.20260914231719-ae190fadb732 14 Sep 2026
- v3.22.0-rc.1.0.20260911224621-e148727ed112 11 Sep 2026
- v3.22.0 09 Sep 2026
- v3.12.0-dev.1.0.20260908115435-e83adef39eb9 08 Sep 2026
- v3.22.0-rc.1.0.20260908115435-e83adef39eb9 08 Sep 2026
- v3.22.0-rc.1.0.20260902180216-59ce08e0e228 02 Sep 2026
- v3.22.0-rc.1 31 Aug 2026
- v3.20.1-0.20260825114313-665ab55b05ce 25 Aug 2026
- v3.20.1-0.20260817215543-bcbdb1e8ae5f 17 Aug 2026
- v3.21.4 13 Aug 2026
- v3.20.1-0.20260813193552-a442b8cf64f5 13 Aug 2026
- v3.20.1-0.20260807215309-c068b543256b 07 Aug 2026
- v3.20.1-0.20260803215453-88215407a890 03 Aug 2026
- v3.20.1-0.20260724005510-bd392c6a60d0 24 Jul 2026
- v3.20.1-0.20260722192245-f174561a9729 22 Jul 2026
- v3.20.1-0.20260715223938-c9ed0caebae6 15 Jul 2026
- v3.21.3 09 Jul 2026
- v3.20.1-0.20260709205451-519438355392 09 Jul 2026
- v3.21.2 20 Jun 2026
- v3.20.1-0.20260619213823-fd501ad7c80d 19 Jun 2026
- v3.21.1 12 Jun 2026
- v3.20.1-0.20260512101523-d9cc2fe70de3 12 May 2026
- v3.21.0 06 May 2026
- v3.21.0-rc.1 06 May 2026
- v3.20.1-0.20260412204312-4d4902c43112 12 Apr 2026
- v3.20.2 09 Apr 2026
- v3.20.2-0.20260409202707-8fb76d6ab555 09 Apr 2026
- v3.20.1-0.20260409202654-3a8927e275c5 09 Apr 2026
- v3.20.2-0.20260409202654-3a8927e275c5 09 Apr 2026
- v3.20.1 11 Mar 2026
- v3.20.1-0.20260311232017-26c6f19f9679 11 Mar 2026
- v3.20.1-0.20260311231956-5417bfaa8487 11 Mar 2026
- v3.19.5 14 Jan 2026
- v3.20.0 12 Jan 2026
- v3.20.0-rc.1 12 Jan 2026
- v3.12.0-dev.1.0.20260110104058-4e4f0eda5eb4 10 Jan 2026
- v3.12.0-dev.1.0.20251222182639-526076ee3bb8 22 Dec 2025
- v3.19.4 11 Dec 2025
- v3.19.3 25 Nov 2025
- v3.12.0-dev.1.0.20251120082040-99b2202b1954 20 Nov 2025
- v3.0.0-20251112130104-8766e718a011 12 Nov 2025
- v3.19.2 12 Nov 2025
- v3.19.1 11 Nov 2025
- v3.12.0-dev.1.0.20250912200652-67496bb2c290 12 Sep 2025
- v3.12.0-dev.1.0.20250912081333-b80959f24fab 12 Sep 2025
- v3.19.0 05 Sep 2025
- v3.19.0-rc.1 05 Sep 2025
- v3.12.0-dev.1.0.20250904210555-eab6c55646f3 04 Sep 2025
- v3.18.6 19 Aug 2025
- v3.18.4-0.20250813192056-b78692c18f0f 13 Aug 2025
- v3.18.5 13 Aug 2025
- v3.18.4-0.20250813191000-ec5f59e2db56 13 Aug 2025
- v3.18.5-0.20250813191000-ec5f59e2db56 13 Aug 2025
- v3.17.4 15 Jul 2025
- v3.18.4 08 Jul 2025
- v3.18.4-0.20250708191627-c48c500247ca 08 Jul 2025
- v3.18.4-0.20250708141218-563b0947b995 08 Jul 2025
- v3.18.4-0.20250708140752-00de613324df 08 Jul 2025
- v3.12.0-dev.1.0.20250707142757-4389fa639a4d 07 Jul 2025
- v3.12.0-dev.1.0.20250627152316-493ed30ff41d 27 Jun 2025
- v3.18.3 16 Jun 2025
- v3.18.2 31 May 2025
- v3.18.1 27 May 2025
- v3.0.0-20250523201203-806d59750af5 23 May 2025
- v3.12.0-dev.1.0.20250523201203-806d59750af5 23 May 2025
- v3.12.0-dev.1.0.20250523041329-e37962522cdd 23 May 2025
- v3.12.0-dev.1.0.20250519133509-e6122aba27fd 19 May 2025
- v3.18.0 14 May 2025
- v3.18.0-rc.2 14 May 2025
- v3.18.0-rc.1 05 May 2025
- v3.17.3 09 Apr 2025
- v3.12.0-dev.1.0.20250321202117-78a052cb963c 21 Mar 2025
- v3.12.0-dev.1.0.20250314144618-c188441757c6 14 Mar 2025
- v3.17.2 13 Mar 2025
- v3.17.1 12 Feb 2025
- v3.12.0-dev.1.0.20250117122948-326c1e3f6782 17 Jan 2025
- v3.17.0 06 Jan 2025
- v3.17.0-rc.1 06 Jan 2025
- v3.12.0-dev.1.0.20241220003932-b97ed6545acb 20 Dec 2024
- v3.12.0-dev.1.0.20241219165331-038321ce7930 19 Dec 2024
- v3.16.4 16 Dec 2024
- v3.12.0-dev.1.0.20241215055005-a933bcc7d137 15 Dec 2024
- v3.12.0-dev.1.0.20241207025529-b91a772d7134 07 Dec 2024
- v3.12.0-dev.1.0.20241206234153-1bc7a28a452b 06 Dec 2024
- v3.12.0-dev.1.0.20241206202856-4dd2a7d62688 06 Dec 2024
- v3.12.0-dev.1.0.20241205200003-f3b81964e7a0 05 Dec 2024
- v3.12.0-dev.1.0.20241204152915-2cea1466d3c2 04 Dec 2024
- v3.12.0-dev.1.0.20241201063125-11a9bf060bcf 01 Dec 2024
- v3.12.0-dev.1.0.20241127151737-d1e9c022c68e 27 Nov 2024
- v3.12.0-dev.1.0.20241126012241-e0a33f095be9 26 Nov 2024
- v3.12.0-dev.1.0.20241122203923-a3c903e4c628 22 Nov 2024
- v3.12.0-dev.1.0.20241121174331-1ab264cb7d12 21 Nov 2024
- v3.12.0-dev.1.0.20241121173900-bb9f0f7816a0 21 Nov 2024
- v3.12.0-dev.1.0.20241120101822-7853d4907132 20 Nov 2024
- v3.12.0-dev.1.0.20241119232255-c724175b032a 19 Nov 2024
- v3.12.0-dev.1.0.20241119212911-bca7d31c9be9 19 Nov 2024
- v3.12.0-dev.1.0.20241119211827-7a22dd28d13b 19 Nov 2024
- v3.12.0-dev.1.0.20241115160331-ecc4adee6923 15 Nov 2024
- v3.12.0-dev.1.0.20241115002025-21568dee297a 15 Nov 2024
- v3.16.3 11 Nov 2024
- v3.12.0-dev.1.0.20241111155945-dd35343988c8 11 Nov 2024
- v3.12.0-dev.1.0.20241019161045-0b68393d5eba 19 Oct 2024
- v3.12.0-dev.1.0.20241015190214-d7c7d15a2d90 15 Oct 2024
- v3.12.0-dev.1.0.20241011200126-474a7437a5f5 11 Oct 2024
- v3.12.0-dev.1.0.20241009202638-a2cffa6e3f9f 09 Oct 2024
- v3.12.0-dev.1.0.20241009195548-140a376539dd 09 Oct 2024
- v3.16.2 09 Oct 2024
- v3.12.0-dev.1.0.20241008082344-f9183a522a7b 08 Oct 2024
- v3.12.0-dev.1.0.20241007193145-dc9b8ec94b2a 07 Oct 2024
- v3.12.0-dev.1.0.20241004201642-145d12f82fc7 04 Oct 2024
- v3.12.0-dev.1.0.20240913194420-3a3e3846ca9c 13 Sep 2024
- v3.12.0-dev.1.0.20240912203922-54fc7fbefd18 12 Sep 2024
The newest 120 of 2,481 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 1 of the 38 were recorded in the last 12 months.
Other ways into the data
03 Vulnerabilities
Recorded vulnerabilities for helm.sh/helm/v3
| Vulnerability | Severity | Fixed version ↓ | Disclosed ↓ |
|---|---|---|---|
| CVE-2020-11013: Information Disclosure in Helm | 8.5 high | 3.1.3 | 27 May 2021 |
| CVE-2025-53547: Helm Code Injection Vulnerability via Malicious Chart.yaml Content | 8.5 high | 3.18.4 | 08 Jul 2025 |
| CVE-2024-26147: Helm's Missing YAML Content Leads To Panic | 7.5 high | 3.14.2 | 22 Feb 2024 |
| CVE-2021-32690: Credential leak in Helm | 6.8 medium | 3.6.1 | 23 Jun 2021 |
| CVE-2025-32386: Helm Out of Memory Termination Due to Malicious Chart Archive | 6.5 medium | 3.17.3 | 10 Apr 2025 |
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
