CVE-2025-32387
MediumAdvisory
Published 9 Apr 2025In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.005
- 40th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 154
- of 17,781 indexed, latest versions
- Container images
- 157
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow
Carried by container images the latest versions of 154 of 17,781 indexed charts deploy, on 157 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| helm.sh/ | v0.0.0-20221012195806-9f88ccb6aee4, v0.0.0-20221214143859-835b7334cfe2, v0.0.0-20230113165805-472c5736ab01, v0.0.0-20230308205603-912ebc1cd10d+66 more | 3.17.3 | 157 |
| helmdeb | 3.18.1-1 | no fix listed | 1 |
- OSV records
- GHSA-5xqw-8hwv-wg92UBUNTU-CVE-2025-32387
- Also known as
- BIT-helm-2025-32387, GO-2025-3602
Charts affected
154 by stars
Container images carrying it
157 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 8bc853c7414c | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | f059af4de8ed | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | 00984ba0f0eb | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | 2ce077d3d02d | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | 59f75504c5d4 | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | a6ae5aff81ce | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | 274a179fd402 | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | 62eaa9c9a929 | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | 00cd9316a379 | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | 71d1f1c0179e | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | c298183a5208 | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | c8882543f693 | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | 315e188a07c2 | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | b40439329191 | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | 27a5c64b7ea8 | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | 3acba3df8827 | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | 365183f83ac9 | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | 6de40f528be9 | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | f52e66eff50b | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | b5ade0d9cc6b | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | 5c109914ff73 | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | 5dfa86b6451f | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | 90097a08b87c | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | b69bcdaa8492 | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | 84f70425f4dd | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | 45e744fc623f | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | df917c5a7e54 | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | 7fbc6855c8b3 | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | 5bc5ca66d55a | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | d7f93d2182fe | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | c0c8d53df9f3 | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | 0fae829caf29 | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | 62370545ba3d | helm.sh/ | 3.17.3 | 1 |
| ghcr.io/ | 9d01bf9c9224 | helm.sh/ | 3.17.3 | 1 |
| public.ecr.aws/ | 1eb61443d68e | helm.sh/ | 3.17.3 | 1 |
| public.ecr.aws/ | 01d8413d5075 | helm.sh/ | 3.17.3 | 1 |
| quay.io/ | 95b5cf7ba6fe | helm.sh/ | 3.17.3 | 1 |
| quay.io/ | a36ab0c0860c | helm.sh/ | 3.17.3 | 1 |
| quay.io/ | acaf37352569 | helm.sh/ | 3.17.3 | 1 |
| quay.io/ | 14b482c1f1b8 | helm.sh/ | 3.17.3 | 1 |
| quay.io/ | 13aaae779248 | helm.sh/ | 3.17.3 | 1 |
| quay.io/ | 3590af73f65a | helm.sh/ | 3.17.3 | 1 |
| quay.io/ | b741efae8d31 | helm.sh/ | 3.17.3 | 1 |
| quay.io/ | 4d9fce2c050e | helm.sh/ | 3.17.3 | 1 |
| quay.io/ | 595c548dee6f | helm.sh/ | 3.17.3 | 1 |
| quay.io/ | 81b2d775edad | helm.sh/ | 3.17.3 | 1 |
| quay.io/ | 8d54fe9d0c0d | helm.sh/ | 3.17.3 | 1 |
| quay.io/ | ebba936046ab | helm.sh/ | 3.17.3 | 1 |
| quay.io/ | edb322094359 | helm.sh/ | 3.17.3 | 1 |
| quay.io/ | 65a38180e27a | helm.sh/ | 3.17.3 | 1 |