CVE-2025-55199: Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion

August 14, 2025

A Helm contributor discovered that it was possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory (OOM) termination.

References

github.com/advisories/GHSA-9h84-qmv7-982p
github.com/helm/helm
github.com/helm/helm/commit/b78692c18f0fb38fe5ba4571a674de067a4c53a5
github.com/helm/helm/security/advisories/GHSA-9h84-qmv7-982p
nvd.nist.gov/vuln/detail/CVE-2025-55199

Code Behaviors & Features

Detect and mitigate CVE-2025-55199 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →