CVE-2025-55198: Helm May Panic Due To Incorrect YAML Content

August 14, 2025

A Helm contributor discovered an improper validation of type error when parsing Chart.yaml and index.yaml files that can lead to a panic.

References

github.com/advisories/GHSA-f9f8-9pmf-xv68
github.com/helm/helm
github.com/helm/helm/commit/ec5f59e2db56533d042a124f5bae54dd87b558e6
github.com/helm/helm/security/advisories/GHSA-f9f8-9pmf-xv68
nvd.nist.gov/vuln/detail/CVE-2025-55198

Code Behaviors & Features

Detect and mitigate CVE-2025-55198 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →