Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2025-32387 · CVE overview and exploitation status

EUVD-2025-10671

GHSA-5xqw-8hwv-wg92

BIT-helm-2025-32387

GO-2025-3602

cve-program · CVE-2025-32387

• https://github.com/helm/helm/security/advisories/GHSA-5xqw-8hwv-wg92
• https://github.com/helm/helm/commit/d8ca55fc669645c10c0681d49723f4bb8c0b1ce7

euvd · EUVD-2025-10671

• https://github.com/helm/helm/security/advisories/GHSA-5xqw-8hwv-wg92
• https://github.com/helm/helm/commit/d8ca55fc669645c10c0681d49723f4bb8c0b1ce7

nvd · CVE-2025-32387

• https://github.com/helm/helm/commit/d8ca55fc669645c10c0681d49723f4bb8c0b1ce7
• https://github.com/helm/helm/security/advisories/GHSA-5xqw-8hwv-wg92

osv · GHSA-5xqw-8hwv-wg92

• https://github.com/helm/helm/security/advisories/GHSA-5xqw-8hwv-wg92
• https://nvd.nist.gov/vuln/detail/CVE-2025-32387
• https://github.com/helm/helm/commit/d8ca55fc669645c10c0681d49723f4bb8c0b1ce7
• https://github.com/helm/helm

osv · GO-2025-3602

• https://github.com/helm/helm/security/advisories/GHSA-5xqw-8hwv-wg92
• https://github.com/helm/helm/commit/d8ca55fc669645c10c0681d49723f4bb8c0b1ce7

No related changes are available here.