{"id":"EUVD-2026-80871","enisaUuid":"a36873dc-8f3e-315d-beda-a8344427d2ef","description":"oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, the parseLink function in registry/remote/utils.go accepts an absolute URL from a registry-controlled Link response header without validating its scheme, host, or port. Tags, Referrers, and Repositories pagination operations then issue a GET request to the attacker-selected URL from the victim\u0027s network, allowing blind server-side request forgery against internal services. The response body is not returned to the attacker, but timing and error differences can reveal service reachability, and credentials may be attached when the credential store has an entry for the target host. Exploitation requires a victim to perform a pagination-based listing operation against a malicious registry. The maintainer identifies this report as a duplicate of GHSA-3hr5-mjrr-hfjh and states that remediation is consolidated in that earlier advisory. The consolidated issue is fixed in version 2.6.2.","datePublished":"Sep 16, 2026, 4:22:14 PM","dateUpdated":"Sep 16, 2026, 5:29:51 PM","baseScore":4.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","references":"https://github.com/oras-project/oras-go/security/advisories/GHSA-h7vf-4x9w-h99v\nhttps://github.com/oras-project/oras-go/commit/31da1963f8c327dd089cd29faeae95cf0fc50842\nhttps://github.com/oras-project/oras-go/releases/tag/v2.6.2\n","aliases":"CVE-2026-85732\nGHSA-h7vf-4x9w-h99v\n","assigner":"GitHub_M","epss":0.38,"enisaIdProduct":[{"id":"a72d0e74-6b19-3640-95be-adb2d25842d6","product":{"name":"oras-go","vendor":{"name":"oras-project"}},"product_version":"\u003c 2.6.2"}],"enisaIdVendor":[{"id":"1b0a1737-54bc-31eb-bcc3-5f563442a620","vendor":{"name":"oras-project"}}],"enisaIdVulnerability":[{"id":"1594ff42-e654-3c66-8e26-0f4b2c1bf9a5","vulnerability":{"id":"CVE-2026-85732","description":"oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, the parseLink function in registry/remote/utils.go accepts an absolute URL from a registry-controlled Link response header without validating its scheme, host, or port. Tags, Referrers, and Repositories pagination operations then issue a GET request to the attacker-selected URL from the victim\u0027s network, allowing blind server-side request forgery against internal services. The response body is not returned to the attacker, but timing and error differences can reveal service reachability, and credentials may be attached when the credential store has an entry for the target host. Exploitation requires a victim to perform a pagination-based listing operation against a malicious registry. The maintainer identifies this report as a duplicate of GHSA-3hr5-mjrr-hfjh and states that remediation is consolidated in that earlier advisory. The consolidated issue is fixed in version 2.6.2.","datePublished":"Sep 16, 2026, 4:22:14 PM","dateUpdated":"Sep 16, 2026, 5:29:51 PM","status":"PUBLISHED","baseScore":4.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","references":"https://github.com/oras-project/oras-go/security/advisories/GHSA-h7vf-4x9w-h99v\nhttps://github.com/oras-project/oras-go/commit/31da1963f8c327dd089cd29faeae95cf0fc50842\nhttps://github.com/oras-project/oras-go/releases/tag/v2.6.2\n","enisa_id":"EUVD-2026-80871\n","assigner":"GitHub_M","epss":0.38,"dataProcessed":"Oct 30, 2026, 7:13:56 AM","vulnerabilityProduct":[{"id":"47d65189-0db3-35b0-b6bf-26ff2c869f3a","product":{"name":"oras-go","vendor":{"name":"oras-project"}},"product_version":"\u003c 2.6.2"}],"vulnerabilityVendor":[{"id":"63b298b0-daa7-364e-9565-5939f0c08a55","vendor":{"name":"oras-project"}}]}},{"id":"772a94e1-733c-3969-9e94-c1d17da98c62","vulnerability":{"id":"GHSA-h7vf-4x9w-h99v","description":"oras-go: Blind SSRF via unvalidated Link header URL in pagination allows internal network probing","datePublished":"Sep 17, 2026, 5:16:02 PM","dateUpdated":"Sep 17, 2026, 5:16:02 PM","baseScore":0.0,"references":"https://github.com/oras-project/oras-go/security/advisories/GHSA-h7vf-4x9w-h99v\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-85732\nhttps://github.com/oras-project/oras-go/commit/31da1963f8c327dd089cd29faeae95cf0fc50842\nhttps://github.com/oras-project/oras-go\nhttps://github.com/oras-project/oras-go/releases/tag/v2.6.2\n","enisa_id":"EUVD-2026-80871\n","aliases":"GHSA-h7vf-4x9w-h99v\nCVE-2026-85732\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:01:07 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"112e9f15-9c6a-3f65-9eb0-e48ea04af7ca","advisory":{"id":"openSUSE-SU-2026:11848-1","description":"helm-4.3.0-2.1 on GA media","summary":"helm-4.3.0-2.1 on GA media","datePublished":"Sep 22, 2026, 12:00:00 AM","dateUpdated":"Sep 23, 2026, 8:33:15 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11848-1.json\nhttps://www.suse.com/security/cve/CVE-2026-85732/\n","aliases":"CVE-2026-85732\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"08c007dd-fd1c-34b7-8bd7-0e5c4e99af47","product":{"name":"helm-fish-completion-0:4.3.0-2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"14eefd58-08f0-3663-b530-6dce473b5346","product":{"name":"helm-0:4.3.0-2.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"156f0186-4d29-32c8-bf31-5f7a31b9edab","product":{"name":"helm-fish-completion-0:4.3.0-2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"1a1a2cd5-b456-393a-a335-48b01ad4f7ae","product":{"name":"helm-0:4.3.0-2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"289298ff-5b4d-35bc-aaaf-26fcf4608f66","product":{"name":"helm-zsh-completion-0:4.3.0-2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"3749a06a-f07d-31ce-bfc2-7a7f471268c3","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"3e03b9f2-9cf0-3ae8-986d-38adf61335ad","product":{"name":"helm-bash-completion-0:4.3.0-2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"47c42045-15b0-38cb-b1b1-ef511325b4e8","product":{"name":"helm-bash-completion-0:4.3.0-2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"5172dbc6-1b5b-35c6-b13e-c38ce1deab71","product":{"name":"helm-zsh-completion-0:4.3.0-2.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"551eb814-5afa-3f39-a9cb-964037b84f53","product":{"name":"helm-zsh-completion-0:4.3.0-2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"7f6930f3-b1ec-3f2d-9696-9f8daac83393","product":{"name":"helm-fish-completion-0:4.3.0-2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"901a4605-3390-37b2-96e0-bb11e69c3e7e","product":{"name":"helm-bash-completion-0:4.3.0-2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"9473e43a-7fc0-306b-aca8-71c323c8f35f","product":{"name":"helm-0:4.3.0-2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"d88beba5-fa70-3837-bf63-c09a6e588e52","product":{"name":"helm-0:4.3.0-2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"e4246617-77c8-33f8-b801-7a4d17f8227e","product":{"name":"helm-fish-completion-0:4.3.0-2.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"e4b30090-10f7-30d5-89bd-3b8095e1b9e0","product":{"name":"helm-bash-completion-0:4.3.0-2.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"e519f9c7-a059-36e9-993a-96196cff6561","product":{"name":"helm-zsh-completion-0:4.3.0-2.1.s390x","vendor":{"name":"SUSE"}}}]}},{"id":"3525fb6b-ef83-378f-b81d-f9523d02c1c9","advisory":{"id":"openSUSE-SU-2026:21983-1","description":"Security update for helm","summary":"Security update for helm","datePublished":"Sep 30, 2026, 5:58:26 PM","dateUpdated":"Oct 1, 2026, 4:39:39 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21983-1.json\nhttps://bugzilla.suse.com/1261935\nhttps://bugzilla.suse.com/1261938\nhttps://bugzilla.suse.com/1261939\nhttps://bugzilla.suse.com/1265428\nhttps://bugzilla.suse.com/1265758\nhttps://bugzilla.suse.com/1270127\nhttps://bugzilla.suse.com/1271660\nhttps://bugzilla.suse.com/1271997\nhttps://bugzilla.suse.com/1275024\nhttps://bugzilla.suse.com/1275025\nhttps://bugzilla.suse.com/1276327\nhttps://bugzilla.suse.com/1276510\nhttps://bugzilla.suse.com/1276514\nhttps://bugzilla.suse.com/1281112\nhttps://bugzilla.suse.com/1281426\nhttps://bugzilla.suse.com/1281468\nhttps://bugzilla.suse.com/1281469\nhttps://www.suse.com/security/cve/CVE-2026-33814/\nhttps://www.suse.com/security/cve/CVE-2026-35204/\nhttps://www.suse.com/security/cve/CVE-2026-35205/\nhttps://www.suse.com/security/cve/CVE-2026-35206/\nhttps://www.suse.com/security/cve/CVE-2026-41178/\nhttps://www.suse.com/security/cve/CVE-2026-41888/\nhttps://www.suse.com/security/cve/CVE-2026-48978/\nhttps://www.suse.com/security/cve/CVE-2026-50151/\nhttps://www.suse.com/security/cve/CVE-2026-50163/\nhttps://www.suse.com/security/cve/CVE-2026-56852/\nhttps://www.suse.com/security/cve/CVE-2026-56854/\nhttps://www.suse.com/security/cve/CVE-2026-56855/\nhttps://www.suse.com/security/cve/CVE-2026-56864/\nhttps://www.suse.com/security/cve/CVE-2026-56865/\nhttps://www.suse.com/security/cve/CVE-2026-78662/\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\nhttps://www.suse.com/security/cve/CVE-2026-85732/\n","aliases":"CVE-2026-33814\nCVE-2026-35204\nCVE-2026-35205\nCVE-2026-35206\nCVE-2026-41178\nCVE-2026-41888\nCVE-2026-48978\nCVE-2026-50151\nCVE-2026-50163\nCVE-2026-56852\nCVE-2026-56854\nCVE-2026-56855\nCVE-2026-56864\nCVE-2026-56865\nCVE-2026-78662\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-85732\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"4f501860-c244-31a9-9576-97a3eb59008a","product":{"name":"helm-zsh-completion-0:4.3.0-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"64d76c88-f48d-32cb-a424-02f242e00c30","product":{"name":"helm-0:4.3.0-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"a8bafc2b-a822-3c97-8fb0-2198106488ec","product":{"name":"helm-0:4.3.0-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b3579689-c960-36bb-8d23-7e16262d6488","product":{"name":"helm-fish-completion-0:4.3.0-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"b3d938fa-019d-3492-a406-51ccb3a26f89","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"b6a2d8cc-5231-3e20-9fab-5c7a754ba02d","product":{"name":"helm-0:4.3.0-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"eb8684e5-9a6a-3202-94dc-3c3f98c1153d","product":{"name":"helm-bash-completion-0:4.3.0-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"f6c11c52-f6e0-3abf-812d-f44b8a995d24","product":{"name":"helm-0:4.3.0-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"38b6ae72-c0f0-3b20-8701-9285e839d0be","advisory":{"id":"SUSE-SU-2026:24247-1","description":"Security update for helm","summary":"Security update for helm","datePublished":"Oct 8, 2026, 6:20:47 AM","dateUpdated":"Oct 21, 2026, 11:50:24 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_24247-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624247-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624247-1/\nhttps://bugzilla.suse.com/1281112\nhttps://bugzilla.suse.com/1283642\nhttps://bugzilla.suse.com/1284104\nhttps://www.suse.com/security/cve/CVE-2026-63209/\nhttps://www.suse.com/security/cve/CVE-2026-81870/\nhttps://www.suse.com/security/cve/CVE-2026-85732/\n","aliases":"CVE-2026-63209\nCVE-2026-81870\nCVE-2026-85732\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"1ab98e77-b466-33fc-92a7-30c1896f7f68","product":{"name":"helm-fish-completion-0:4.3.0-160000.2.1.noarch","vendor":{"name":"SUSE"}}},{"id":"31514624-86f5-37fa-b9a3-00c0f62b188e","product":{"name":"helm-0:4.3.0-160000.2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"52935e33-b267-3df5-9e8b-5bd098f7f0a6","product":{"name":"SUSE Linux Enterprise Server for SAP applications 16.0","vendor":{"name":"SUSE"}}},{"id":"62945354-9489-3667-ace6-58833f155033","product":{"name":"helm-0:4.3.0-160000.2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"6a620340-36d6-31f9-b5b5-3cb28d39652a","product":{"name":"SUSE Linux Enterprise Server 16.0","vendor":{"name":"SUSE"}}},{"id":"c7be4849-2711-3937-8f21-10a212d78652","product":{"name":"helm-bash-completion-0:4.3.0-160000.2.1.noarch","vendor":{"name":"SUSE"}}},{"id":"ec77745b-4592-366f-a3c0-e3a2517f8049","product":{"name":"helm-0:4.3.0-160000.2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"f1c4c31f-0245-3684-99cd-c8d11d96d01a","product":{"name":"helm-zsh-completion-0:4.3.0-160000.2.1.noarch","vendor":{"name":"SUSE"}}}]}},{"id":"3b735c6f-0566-3623-90be-c5be1c1ecfae","advisory":{"id":"SUSE-SU-2026:23973-1","description":"Security update for helm","summary":"Security update for helm","datePublished":"Sep 30, 2026, 5:49:13 PM","dateUpdated":"Oct 15, 2026, 5:13:23 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23973-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202623973-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202623973-1/\nhttps://bugzilla.suse.com/1261935\nhttps://bugzilla.suse.com/1261938\nhttps://bugzilla.suse.com/1261939\nhttps://bugzilla.suse.com/1265428\nhttps://bugzilla.suse.com/1265758\nhttps://bugzilla.suse.com/1270127\nhttps://bugzilla.suse.com/1271660\nhttps://bugzilla.suse.com/1271997\nhttps://bugzilla.suse.com/1275024\nhttps://bugzilla.suse.com/1275025\nhttps://bugzilla.suse.com/1276327\nhttps://bugzilla.suse.com/1276510\nhttps://bugzilla.suse.com/1276514\nhttps://bugzilla.suse.com/1281112\nhttps://bugzilla.suse.com/1281426\nhttps://bugzilla.suse.com/1281468\nhttps://bugzilla.suse.com/1281469\nhttps://www.suse.com/security/cve/CVE-2026-33814/\nhttps://www.suse.com/security/cve/CVE-2026-35204/\nhttps://www.suse.com/security/cve/CVE-2026-35205/\nhttps://www.suse.com/security/cve/CVE-2026-35206/\nhttps://www.suse.com/security/cve/CVE-2026-41178/\nhttps://www.suse.com/security/cve/CVE-2026-41888/\nhttps://www.suse.com/security/cve/CVE-2026-48978/\nhttps://www.suse.com/security/cve/CVE-2026-50151/\nhttps://www.suse.com/security/cve/CVE-2026-50163/\nhttps://www.suse.com/security/cve/CVE-2026-56852/\nhttps://www.suse.com/security/cve/CVE-2026-56854/\nhttps://www.suse.com/security/cve/CVE-2026-56855/\nhttps://www.suse.com/security/cve/CVE-2026-56864/\nhttps://www.suse.com/security/cve/CVE-2026-56865/\nhttps://www.suse.com/security/cve/CVE-2026-78662/\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\nhttps://www.suse.com/security/cve/CVE-2026-85732/\n","aliases":"CVE-2026-33814\nCVE-2026-35204\nCVE-2026-35205\nCVE-2026-35206\nCVE-2026-41178\nCVE-2026-41888\nCVE-2026-48978\nCVE-2026-50151\nCVE-2026-50163\nCVE-2026-56852\nCVE-2026-56854\nCVE-2026-56855\nCVE-2026-56864\nCVE-2026-56865\nCVE-2026-78662\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-85732\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"21607737-4e66-3f06-a45a-29f2f23b02a8","product":{"name":"helm-bash-completion-0:4.3.0-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"400dba31-2ec6-36d4-991f-7c0b5bd6e80b","product":{"name":"helm-0:4.3.0-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"6ce9aae9-e277-3370-b5a4-56aba23ffb55","product":{"name":"helm-0:4.3.0-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"7a97ab71-4b96-39bc-aa3b-ee89a5c15ede","product":{"name":"helm-0:4.3.0-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"a71f8e6d-207d-3f79-97a2-f016451fea1e","product":{"name":"SUSE Linux Micro 6.2","vendor":{"name":"SUSE"}}},{"id":"b6ae4ad5-fb06-300a-8fd8-11bc2693f1e5","product":{"name":"helm-0:4.3.0-160000.1.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"5831fa3d-7674-32fd-a5a2-a77f6b0e0ccb","advisory":{"id":"openSUSE-SU-2026:11832-1","description":"helm3-3.22.0-1.1 on GA media","summary":"helm3-3.22.0-1.1 on GA media","datePublished":"Sep 21, 2026, 12:00:00 AM","dateUpdated":"Sep 22, 2026, 9:43:36 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11832-1.json\nhttps://www.suse.com/security/cve/CVE-2026-85731/\nhttps://www.suse.com/security/cve/CVE-2026-85732/\n","aliases":"CVE-2026-85731\nCVE-2026-85732\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"09b30732-19c0-3b80-9e67-5f0c7a69b13a","product":{"name":"helm3-fish-completion-0:3.22.0-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"173be321-9461-3237-bb81-47a8285d25f3","product":{"name":"helm3-zsh-completion-0:3.22.0-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"22a41363-304b-36d2-bf78-5ccb95584c46","product":{"name":"helm3-zsh-completion-0:3.22.0-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"3582741f-3eac-3b53-927d-7f01854c58b9","product":{"name":"helm3-fish-completion-0:3.22.0-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"3bfeab17-1625-3b70-ba9e-86da0669abaf","product":{"name":"helm3-fish-completion-0:3.22.0-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"4f1ad4ca-5eb2-3c6d-ab08-5af78027d826","product":{"name":"helm3-bash-completion-0:3.22.0-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"552858fe-f843-3491-b92d-e7d552abcf7a","product":{"name":"helm3-zsh-completion-0:3.22.0-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"560222c0-df04-3994-90ca-ba3a0e0cd6d9","product":{"name":"helm3-bash-completion-0:3.22.0-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"776d7de9-2068-3fe3-a61d-e9d525160291","product":{"name":"helm3-fish-completion-0:3.22.0-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"7d8dc7a8-3365-331b-81f4-d9c84205cef3","product":{"name":"helm3-zsh-completion-0:3.22.0-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"9612598b-88df-3b24-91c7-6349bbdc0a83","product":{"name":"helm3-0:3.22.0-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"a6f71305-3a3b-3104-a94e-ac8544eeaf7e","product":{"name":"helm3-0:3.22.0-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b4635d18-81d4-3aed-a206-7c1f8433a0f0","product":{"name":"helm3-bash-completion-0:3.22.0-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"b83ac10d-ce29-34eb-82a1-ae933b8d4b90","product":{"name":"helm3-0:3.22.0-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"c8d8f2d9-9b94-3388-af91-fdcb8d7bbc9d","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"d05e8a3e-52c8-3bf7-b2a4-14e076198468","product":{"name":"helm3-0:3.22.0-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"fc1d5356-f4f5-3e1c-9d08-3139bde2a04e","product":{"name":"helm3-bash-completion-0:3.22.0-1.1.aarch64","vendor":{"name":"SUSE"}}}]}},{"id":"58ef155d-a091-3f5a-8af2-d68d42a062a3","advisory":{"id":"SUSE-SU-2026:24120-1","description":"Security update for helm","summary":"Security update for helm","datePublished":"Oct 8, 2026, 6:20:47 AM","dateUpdated":"Oct 15, 2026, 5:14:09 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_24120-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624120-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624120-1/\nhttps://bugzilla.suse.com/1281112\nhttps://bugzilla.suse.com/1283642\nhttps://bugzilla.suse.com/1284104\nhttps://www.suse.com/security/cve/CVE-2026-63209/\nhttps://www.suse.com/security/cve/CVE-2026-81870/\nhttps://www.suse.com/security/cve/CVE-2026-85732/\n","aliases":"CVE-2026-63209\nCVE-2026-81870\nCVE-2026-85732\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"04aba8ae-fbb4-3fbe-ab2f-9f9797f2effe","product":{"name":"SUSE Linux Micro 6.2","vendor":{"name":"SUSE"}}},{"id":"4c23d1a0-9bfc-3a28-ba82-518db0c0b198","product":{"name":"helm-0:4.3.0-160000.2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"679ebf5a-3a2b-3db2-87ed-a5655318eefa","product":{"name":"helm-0:4.3.0-160000.2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"b0ad593e-5e3f-3372-bb9e-f4fd196bcf84","product":{"name":"helm-0:4.3.0-160000.2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"d3b5d189-3576-3bfc-8e65-312ce2602357","product":{"name":"helm-bash-completion-0:4.3.0-160000.2.1.noarch","vendor":{"name":"SUSE"}}}]}},{"id":"6a0ecfa5-49a2-311c-84d8-ec59ff472a12","advisory":{"id":"openSUSE-SU-2026:22057-1","description":"Security update for helm","summary":"Security update for helm","datePublished":"Oct 8, 2026, 6:20:47 AM","dateUpdated":"Oct 19, 2026, 5:24:47 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_22057-1.json\nhttps://bugzilla.suse.com/1281112\nhttps://bugzilla.suse.com/1283642\nhttps://bugzilla.suse.com/1284104\nhttps://www.suse.com/security/cve/CVE-2026-63209/\nhttps://www.suse.com/security/cve/CVE-2026-81870/\nhttps://www.suse.com/security/cve/CVE-2026-85732/\n","aliases":"CVE-2026-63209\nCVE-2026-81870\nCVE-2026-85732\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"349f963f-a835-3f11-a1df-f7dfab4d1ae2","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"a0b1d4b4-1642-33e3-91eb-cdeb0b4d758e","product":{"name":"helm-bash-completion-0:4.3.0-160000.2.1.noarch","vendor":{"name":"SUSE"}}},{"id":"b4d6f51c-3c45-3b68-8be4-ee3b8230d2ab","product":{"name":"helm-0:4.3.0-160000.2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"b8481e4c-bd5c-3fef-bcc5-7a1b596008b6","product":{"name":"helm-0:4.3.0-160000.2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"e62cefff-c367-32fc-ac53-6559632e26c7","product":{"name":"helm-fish-completion-0:4.3.0-160000.2.1.noarch","vendor":{"name":"SUSE"}}},{"id":"eca866b9-5a73-392b-90a2-62be036fe90b","product":{"name":"helm-0:4.3.0-160000.2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"f434ad09-9f44-3854-9404-4638b4bd5d19","product":{"name":"helm-zsh-completion-0:4.3.0-160000.2.1.noarch","vendor":{"name":"SUSE"}}}]}},{"id":"b685a662-6a1d-3c5d-80d6-c4f5024659b7","advisory":{"id":"SUSE-SU-2026:23984-1","description":"Security update for helm","summary":"Security update for helm","datePublished":"Sep 30, 2026, 5:49:13 PM","dateUpdated":"Oct 5, 2026, 4:59:28 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23984-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202623984-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202623984-1/\nhttps://bugzilla.suse.com/1261935\nhttps://bugzilla.suse.com/1261938\nhttps://bugzilla.suse.com/1261939\nhttps://bugzilla.suse.com/1265428\nhttps://bugzilla.suse.com/1265758\nhttps://bugzilla.suse.com/1270127\nhttps://bugzilla.suse.com/1271660\nhttps://bugzilla.suse.com/1271997\nhttps://bugzilla.suse.com/1275024\nhttps://bugzilla.suse.com/1275025\nhttps://bugzilla.suse.com/1276327\nhttps://bugzilla.suse.com/1276510\nhttps://bugzilla.suse.com/1276514\nhttps://bugzilla.suse.com/1281112\nhttps://bugzilla.suse.com/1281426\nhttps://bugzilla.suse.com/1281468\nhttps://bugzilla.suse.com/1281469\nhttps://www.suse.com/security/cve/CVE-2026-33814/\nhttps://www.suse.com/security/cve/CVE-2026-35204/\nhttps://www.suse.com/security/cve/CVE-2026-35205/\nhttps://www.suse.com/security/cve/CVE-2026-35206/\nhttps://www.suse.com/security/cve/CVE-2026-41178/\nhttps://www.suse.com/security/cve/CVE-2026-41888/\nhttps://www.suse.com/security/cve/CVE-2026-48978/\nhttps://www.suse.com/security/cve/CVE-2026-50151/\nhttps://www.suse.com/security/cve/CVE-2026-50163/\nhttps://www.suse.com/security/cve/CVE-2026-56852/\nhttps://www.suse.com/security/cve/CVE-2026-56854/\nhttps://www.suse.com/security/cve/CVE-2026-56855/\nhttps://www.suse.com/security/cve/CVE-2026-56864/\nhttps://www.suse.com/security/cve/CVE-2026-56865/\nhttps://www.suse.com/security/cve/CVE-2026-78662/\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\nhttps://www.suse.com/security/cve/CVE-2026-85732/\n","aliases":"CVE-2026-33814\nCVE-2026-35204\nCVE-2026-35205\nCVE-2026-35206\nCVE-2026-41178\nCVE-2026-41888\nCVE-2026-48978\nCVE-2026-50151\nCVE-2026-50163\nCVE-2026-56852\nCVE-2026-56854\nCVE-2026-56855\nCVE-2026-56864\nCVE-2026-56865\nCVE-2026-78662\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-85732\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"0f610c99-27e9-301a-8ae3-45996e7e3982","product":{"name":"helm-bash-completion-0:4.3.0-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"1e8f5341-6eed-34b1-b37e-8e730acb7a0e","product":{"name":"helm-fish-completion-0:4.3.0-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"25f2b3e1-ded4-360b-bdb6-0088fb6623e3","product":{"name":"SUSE Linux Enterprise Server 16.0","vendor":{"name":"SUSE"}}},{"id":"3b963ec4-ce3b-3e27-9e50-f09786e52218","product":{"name":"SUSE Linux Enterprise Server for SAP applications 16.0","vendor":{"name":"SUSE"}}},{"id":"3ed756b4-43fd-3879-a1e3-cc642e8e3aae","product":{"name":"helm-0:4.3.0-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"63a96ec4-80c2-3362-be35-2f017ecf47e5","product":{"name":"helm-zsh-completion-0:4.3.0-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"6fa63fc0-dd99-36a8-958c-60db8f7d2f4a","product":{"name":"helm-0:4.3.0-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"b17051e0-06b4-3f03-8dba-7eb822405a94","product":{"name":"helm-0:4.3.0-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f9f3b058-e598-3e9c-a341-247237c5b740","product":{"name":"helm-0:4.3.0-160000.1.1.aarch64","vendor":{"name":"SUSE"}}}]}},{"id":"b89a736c-b908-3588-945b-f8eeaec73ab8","advisory":{"id":"SUSE-SU-2026:24282-1","description":"Security update for helm","summary":"Security update for helm","datePublished":"Oct 19, 2026, 9:48:48 AM","dateUpdated":"Oct 26, 2026, 7:19:20 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_24282-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624282-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624282-1/\nhttps://bugzilla.suse.com/1261935\nhttps://bugzilla.suse.com/1261938\nhttps://bugzilla.suse.com/1261939\nhttps://bugzilla.suse.com/1265428\nhttps://bugzilla.suse.com/1265758\nhttps://bugzilla.suse.com/1270127\nhttps://bugzilla.suse.com/1271660\nhttps://bugzilla.suse.com/1271997\nhttps://bugzilla.suse.com/1275024\nhttps://bugzilla.suse.com/1275025\nhttps://bugzilla.suse.com/1276327\nhttps://bugzilla.suse.com/1276510\nhttps://bugzilla.suse.com/1276514\nhttps://bugzilla.suse.com/1281112\nhttps://bugzilla.suse.com/1281426\nhttps://bugzilla.suse.com/1281468\nhttps://bugzilla.suse.com/1281469\nhttps://bugzilla.suse.com/1283642\nhttps://bugzilla.suse.com/1284104\nhttps://www.suse.com/security/cve/CVE-2026-33814/\nhttps://www.suse.com/security/cve/CVE-2026-35204/\nhttps://www.suse.com/security/cve/CVE-2026-35205/\nhttps://www.suse.com/security/cve/CVE-2026-35206/\nhttps://www.suse.com/security/cve/CVE-2026-41178/\nhttps://www.suse.com/security/cve/CVE-2026-41888/\nhttps://www.suse.com/security/cve/CVE-2026-48978/\nhttps://www.suse.com/security/cve/CVE-2026-50151/\nhttps://www.suse.com/security/cve/CVE-2026-50163/\nhttps://www.suse.com/security/cve/CVE-2026-56852/\nhttps://www.suse.com/security/cve/CVE-2026-56854/\nhttps://www.suse.com/security/cve/CVE-2026-56855/\nhttps://www.suse.com/security/cve/CVE-2026-56864/\nhttps://www.suse.com/security/cve/CVE-2026-56865/\nhttps://www.suse.com/security/cve/CVE-2026-63209/\nhttps://www.suse.com/security/cve/CVE-2026-78662/\nhttps://www.suse.com/security/cve/CVE-2026-81870/\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\nhttps://www.suse.com/security/cve/CVE-2026-85732/\n","aliases":"CVE-2026-33814\nCVE-2026-35204\nCVE-2026-35205\nCVE-2026-35206\nCVE-2026-41178\nCVE-2026-41888\nCVE-2026-48978\nCVE-2026-50151\nCVE-2026-50163\nCVE-2026-56852\nCVE-2026-56854\nCVE-2026-56855\nCVE-2026-56864\nCVE-2026-56865\nCVE-2026-63209\nCVE-2026-78662\nCVE-2026-81870\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-85732\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"1e83493a-b796-3b88-b9d9-059829625ec7","product":{"name":"helm-0:4.3.0-slfo.1.1_1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"2ecac57e-5314-33ad-a251-656e025c6f26","product":{"name":"helm-bash-completion-0:4.3.0-slfo.1.1_1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"5efff528-5220-3b4e-8125-fdba961fa6ea","product":{"name":"helm-0:4.3.0-slfo.1.1_1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"94cbe7d6-174c-30c8-8c12-4ba6073c140d","product":{"name":"helm-0:4.3.0-slfo.1.1_1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"a7ef17e3-52b9-3d9b-b80f-1fcdfd4c2fc0","product":{"name":"SUSE Linux Micro 6.1","vendor":{"name":"SUSE"}}}]}}]}