Database/Container, Kubernetes & orchestration
Helm: OOM panic in the strvals package from crafted `--set` input
CVE-2022-36055Container, Kubernetes & orchestrationcurated
Impact
OOM panic in the strvals package from crafted --set input
Who can reach it
Anyone who can supply chart values, e.g. through a self-service portal
What to do
Upgrade Helm; validate tenant-supplied values
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.