[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-32387":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":34,"aliases":35,"duplicate_of":9,"upstream":39,"downstream":40,"duplicates":51,"related":52,"reserved_at":9,"published_at":99,"modified_at":100,"state":101,"summary":102,"references_raw":111,"kevs":137,"epss":138,"epss_history":141,"metrics":378,"affected":388},"CVE-2025-32387","Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be crafted with a deeply nested chain of references, leading to parser recursion that can exceed the stack size limit and trigger a stack overflow. This issue has been resolved in Helm v3.17.3.",null,[11,20],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-121","Stack-based Buffer Overflow","A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).","weakness","Draft","Variant","High",[],{"_key":21,"id":21,"name":22,"description":23,"type":15,"status":16,"abstraction":24,"likelihood_of_exploit":9,"capec":25},"CWE-674","Uncontrolled Recursion","The product does not properly control the amount of recursion that takes place,  consuming excessive resources, such as allocated memory or the program stack.","Class",[26,30],{"id":27,"name":28,"techniques":29},"CAPEC-230","Serialized Data with Nested Payloads",[],{"id":31,"name":32,"techniques":33},"CAPEC-231","Oversized Serialized Data Payloads",[],[],[36,37,38],"GHSA-5xqw-8hwv-wg92","BIT-helm-2025-32387","GO-2025-3602",[],[41,43,45,47,49],{"_key":42},"SUSE-SU-2025:01830-2",{"_key":44},"SUSE-SU-2025:01830-1",{"_key":46},"OPENSUSE-SU-2025:14995-1",{"_key":48},"UBUNTU-CVE-2025-32387",{"_key":50},"SUSE-SU-2026:3056-1",[],[53,54,55,56,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97],{"_key":42},{"_key":44},{"_key":46},{"_key":50},{"_key":58},"CGA-3X39-498G-W4C6",{"_key":60},"CGA-65VG-WPMH-R9C7",{"_key":62},"CGA-6F5J-H2F7-C65Q",{"_key":64},"CGA-7M3F-65H8-PF37",{"_key":66},"CGA-876W-4MXV-7FQW",{"_key":68},"CGA-9FPV-WJ87-C898",{"_key":70},"CGA-9J6R-M74P-Q4G3",{"_key":72},"CGA-C2VV-3J68-88PX",{"_key":74},"CGA-C5RX-56VV-7HV6",{"_key":76},"CGA-FWJF-J2M3-4F36",{"_key":78},"CGA-GFX2-QHVM-RCV2",{"_key":80},"CGA-HJ86-HW38-9VJP",{"_key":82},"CGA-J7MC-R43W-RWWH",{"_key":84},"CGA-M837-7MW5-MCWH",{"_key":86},"CGA-PPWJ-229X-3FW6",{"_key":88},"CGA-R7PR-MQ97-3VVV",{"_key":90},"CGA-RPJ4-4F5M-3W77",{"_key":92},"CGA-VRVP-HHRP-JV86",{"_key":94},"CGA-VWVH-V834-PWWC",{"_key":96},"CGA-WJGH-7F84-9CPP",{"_key":98},"CGA-42HX-875P-8R28","2025-04-09T22:28:33.476Z","2025-04-10T14:58:47.796Z","Analyzed",{"cisa_kev":103,"cisa_ransomware":103,"cisa_vendor":9,"epss_severity":104,"epss_score":105,"severity":106,"severity_score":107,"severity_version":108,"severity_source":109,"severity_vector":110,"severity_status":101},false,"low",0.00407,"medium",6.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",[112,122,128,132],{"url":113,"sources":114,"tags":117},"https://github.com/helm/helm/security/advisories/GHSA-5xqw-8hwv-wg92",[109,115,116],"nvd","osv_go",[118,119,120,121],"X Refsource CONFIRM","Third Party Advisory","WEB","Advisory",{"url":123,"sources":124,"tags":125},"https://github.com/helm/helm/commit/d8ca55fc669645c10c0681d49723f4bb8c0b1ce7",[109,115,116],[126,127,120],"X Refsource MISC","Patch",{"url":129,"sources":130,"tags":131},"https://nvd.nist.gov/vuln/detail/CVE-2025-32387",[116],[121],{"url":133,"sources":134,"tags":135},"https://github.com/helm/helm",[116],[136],"PACKAGE",[],{"date":139,"score":105,"percentile":140},"2026-07-05",0.32655,[142,146,148,151,153,156,159,162,164,167,170,172,175,177,179,183,186,189,192,194,197,199,201,203,205,207,209,211,214,217,219,222,224,227,229,231,234,237,240,242,245,248,251,253,255,257,260,262,265,267,269,273,275,278,280,283,285,288,291,293,295,299,302,305,307,310,313,315,318,321,323,325,328,331,333,335,338,340,343,346,349,352,355,358,360,363,366,369,372,375],{"date":143,"score":144,"percentile":145},"2025-11-04",0.00006,0.00268,{"date":147,"score":144,"percentile":145},"2025-11-05",{"date":149,"score":144,"percentile":150},"2025-11-06",0.0027,{"date":152,"score":144,"percentile":145},"2025-11-07",{"date":154,"score":144,"percentile":155},"2025-11-08",0.00267,{"date":157,"score":144,"percentile":158},"2025-11-09",0.00265,{"date":160,"score":144,"percentile":161},"2025-11-10",0.00266,{"date":163,"score":144,"percentile":158},"2025-11-11",{"date":165,"score":144,"percentile":166},"2025-11-12",0.00263,{"date":168,"score":144,"percentile":169},"2025-11-13",0.00246,{"date":171,"score":144,"percentile":169},"2025-11-14",{"date":173,"score":144,"percentile":174},"2025-11-15",0.00245,{"date":176,"score":144,"percentile":174},"2025-11-16",{"date":178,"score":144,"percentile":174},"2025-11-17",{"date":180,"score":181,"percentile":182},"2025-11-18",0.00077,0.19183,{"date":184,"score":181,"percentile":185},"2025-11-19",0.19207,{"date":187,"score":181,"percentile":188},"2025-11-20",0.19196,{"date":190,"score":144,"percentile":191},"2025-11-21",0.00248,{"date":193,"score":144,"percentile":191},"2025-11-22",{"date":195,"score":144,"percentile":196},"2025-11-23",0.00247,{"date":198,"score":144,"percentile":196},"2025-11-24",{"date":200,"score":144,"percentile":169},"2025-11-25",{"date":202,"score":144,"percentile":169},"2025-11-26",{"date":204,"score":144,"percentile":169},"2025-11-27",{"date":206,"score":144,"percentile":196},"2025-11-28",{"date":208,"score":144,"percentile":169},"2025-11-29",{"date":210,"score":144,"percentile":169},"2025-11-30",{"date":212,"score":144,"percentile":213},"2025-12-01",0.00244,{"date":215,"score":144,"percentile":216},"2025-12-02",0.00243,{"date":218,"score":144,"percentile":213},"2025-12-03",{"date":220,"score":144,"percentile":221},"2025-12-04",0.00251,{"date":223,"score":144,"percentile":221},"2025-12-05",{"date":225,"score":144,"percentile":226},"2025-12-06",0.0025,{"date":228,"score":144,"percentile":226},"2025-12-07",{"date":230,"score":144,"percentile":221},"2025-12-08",{"date":232,"score":144,"percentile":233},"2025-12-09",0.0026,{"date":235,"score":144,"percentile":236},"2025-12-10",0.00261,{"date":238,"score":144,"percentile":239},"2025-12-11",0.00264,{"date":241,"score":144,"percentile":145},"2025-12-12",{"date":243,"score":144,"percentile":244},"2025-12-13",0.00306,{"date":246,"score":144,"percentile":247},"2025-12-14",0.00302,{"date":249,"score":144,"percentile":250},"2025-12-15",0.00301,{"date":252,"score":144,"percentile":247},"2025-12-16",{"date":254,"score":144,"percentile":250},"2025-12-17",{"date":256,"score":144,"percentile":250},"2025-12-18",{"date":258,"score":144,"percentile":259},"2025-12-19",0.003,{"date":261,"score":144,"percentile":259},"2025-12-20",{"date":263,"score":144,"percentile":264},"2025-12-21",0.00299,{"date":266,"score":144,"percentile":259},"2025-12-22",{"date":268,"score":144,"percentile":264},"2025-12-23",{"date":270,"score":271,"percentile":272},"2025-12-24",0.00008,0.00519,{"date":274,"score":271,"percentile":272},"2025-12-25",{"date":276,"score":271,"percentile":277},"2025-12-26",0.00521,{"date":279,"score":271,"percentile":272},"2025-12-27",{"date":281,"score":271,"percentile":282},"2025-12-28",0.0052,{"date":284,"score":271,"percentile":272},"2025-12-29",{"date":286,"score":271,"percentile":287},"2025-12-30",0.00517,{"date":289,"score":271,"percentile":290},"2025-12-31",0.00514,{"date":292,"score":271,"percentile":287},"2026-01-01",{"date":294,"score":271,"percentile":282},"2026-01-02",{"date":296,"score":297,"percentile":298},"2026-01-03",0.00009,0.00632,{"date":300,"score":297,"percentile":301},"2026-01-04",0.00621,{"date":303,"score":297,"percentile":304},"2026-01-05",0.00624,{"date":306,"score":297,"percentile":304},"2026-01-06",{"date":308,"score":297,"percentile":309},"2026-01-07",0.00622,{"date":311,"score":297,"percentile":312},"2026-01-08",0.00627,{"date":314,"score":297,"percentile":298},"2026-01-09",{"date":316,"score":297,"percentile":317},"2026-01-10",0.00634,{"date":319,"score":297,"percentile":320},"2026-01-11",0.00635,{"date":322,"score":297,"percentile":317},"2026-01-12",{"date":324,"score":297,"percentile":298},"2026-01-13",{"date":326,"score":297,"percentile":327},"2026-01-14",0.0063,{"date":329,"score":297,"percentile":330},"2026-01-15",0.00633,{"date":332,"score":297,"percentile":330},"2026-01-16",{"date":334,"score":297,"percentile":317},"2026-01-17",{"date":336,"score":297,"percentile":337},"2026-01-18",0.00638,{"date":339,"score":297,"percentile":317},"2026-01-19",{"date":341,"score":297,"percentile":342},"2026-01-20",0.00631,{"date":344,"score":297,"percentile":345},"2026-01-21",0.00628,{"date":347,"score":297,"percentile":348},"2026-01-22",0.00629,{"date":350,"score":297,"percentile":351},"2026-01-23",0.00636,{"date":353,"score":297,"percentile":354},"2026-01-24",0.00761,{"date":356,"score":297,"percentile":357},"2026-01-25",0.00762,{"date":359,"score":297,"percentile":357},"2026-01-26",{"date":361,"score":297,"percentile":362},"2026-01-27",0.00765,{"date":364,"score":297,"percentile":365},"2026-01-28",0.00763,{"date":367,"score":297,"percentile":368},"2026-01-29",0.00764,{"date":370,"score":297,"percentile":371},"2026-01-30",0.00774,{"date":373,"score":297,"percentile":374},"2026-01-31",0.00782,{"date":376,"score":297,"percentile":377},"2026-02-01",0.00788,[379,384,386],{"source":109,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":380,"cvss_v4_0":9},{"baseScore":107,"baseSeverity":381,"vectorString":110,"impactScore":382,"exploitabilityScore":383},"MEDIUM",6,7.2,{"source":115,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":385,"cvss_v4_0":9},{"baseScore":107,"baseSeverity":381,"vectorString":110,"impactScore":382,"exploitabilityScore":383},{"source":116,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":387,"cvss_v4_0":9},{"baseScore":107,"baseSeverity":9,"vectorString":110,"impactScore":382,"exploitabilityScore":383},[389,402],{"ecosystem":390,"name":391,"vendor":392,"product":393,"cpe_part":9,"purl_type":394,"purl_namespace":392,"purl_name":393,"source":9,"versions":395},"Go","helm.sh/helm/v3","helm.sh/helm","v3","golang",[396],{"version":397,"is_range":398,"range_type":399,"version_start":9,"version_start_type":9,"version_end":400,"version_end_type":401,"fixed_in":9},"lt3_17_3",true,"semver","3.17.3","excluding",{"ecosystem":9,"name":403,"vendor":403,"product":403,"cpe_part":404,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":405},"helm","a",[406],{"version":407,"is_range":398,"range_type":408,"version_start":9,"version_start_type":9,"version_end":400,"version_end_type":401,"fixed_in":9},"lt3.17.3","cpe"]