CVE-2025-32386: Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination

April 10, 2025

A Helm contributor discovered that a specially crafted chart archive file can cause Helm to use all available memory and have an out of memory (OOM) termination.

References

github.com/advisories/GHSA-4hfp-h4cw-hj8p
github.com/helm/helm
github.com/helm/helm/commit/d8ca55fc669645c10c0681d49723f4bb8c0b1ce7
github.com/helm/helm/security/advisories/GHSA-4hfp-h4cw-hj8p
nvd.nist.gov/vuln/detail/CVE-2025-32386

Code Behaviors & Features

Detect and mitigate CVE-2025-32386 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →