[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-63308":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":24,"aliases":34,"duplicate_of":9,"upstream":42,"downstream":43,"duplicates":58,"related":59,"reserved_at":9,"published_at":67,"modified_at":68,"state":69,"summary":70,"references_raw":78,"kevs":157,"epss":158,"epss_history":161,"metrics":351,"affected":373},"CVE-2026-63308","Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the Files.Lines template helper in pkg/engine/files.go that allows attackers to trigger an index out of range panic by including zero-length byte slices in chart files. Attackers can include empty files in Helm charts to cause deterministic render failures across template, install, upgrade, lint, and SDK Engine.Render operations.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-129","Improper Validation of Array Index","The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.","weakness","Draft","Variant","High",[20],{"id":21,"name":22,"techniques":23},"CAPEC-100","Overflow Buffers",[],[25],{"_key":26,"name":27,"source":28,"url":29,"maturity":30,"reliability_score":31,"verified":32,"type":9,"platforms":33,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_HELM_HELM","Helm","github","https://github.com/helm/helm/security/advisories/GHSA-q8q8-93cv-v6h8","poc",0.3,false,[],[35,36,37,38,39,40,41],"openSUSE-SU-2026:11386-1","openSUSE-SU-2026:11387-1","RHSA-2026:55180","CGA-2qrc-c63v-xmxq","CGA-3x28-r54v-2hq9","CGA-h3m6-q55x-mw8r","CGA-wqvw-37f3-4rfj",[],[44,46,48,50,52,54,56],{"_key":45},"SUSE-SU-2026:3882-1",{"_key":47},"OPENSUSE-SU-2026:21809-1",{"_key":49},"SUSE-SU-2026:23456-1",{"_key":51},"SUSE-SU-2026:23506-1",{"_key":53},"SUSE-SU-2026:23522-1",{"_key":55},"RHSA-2026:42230",{"_key":57},"CVE-2026-56852",[],[60,61,62,63,64,65],{"_key":45},{"_key":47},{"_key":49},{"_key":51},{"_key":53},{"_key":66},"CGA-CHFV-CR54-F863","2026-07-17T16:14:15.472Z","2026-07-17T17:25:42.234Z","Analyzed",{"cisa_kev":32,"cisa_ransomware":32,"cisa_vendor":9,"epss_severity":71,"epss_score":72,"severity":73,"severity_score":74,"severity_version":75,"severity_source":76,"severity_vector":77,"severity_status":69},"low",0.00275,"medium",6.5,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",[79,92,98,103,110,116,120,124,128,132,136,140,144,148,152],{"url":80,"sources":81,"tags":86},"https://github.com/helm/helm/issues/32279",[82,76,83,84,85],"cve.org","osv_red_hat","osv_wolfi","osv_chainguard",[87,88,89,90,91],"Technical Description","Exploit","Issue Tracking","ARTICLE","EVIDENCE",{"url":93,"sources":94,"tags":95},"https://github.com/helm/helm/pull/32290",[82,76,83,84,85],[89,96,90,97],"Patch","REPORT",{"url":99,"sources":100,"tags":101},"https://github.com/helm/helm/commit/ba6c9a29efa7bf9198dad6a5ec12b4fb30c96017",[82,76,83,84,85],[96,90,102],"FIX",{"url":104,"sources":105,"tags":106},"https://www.vulncheck.com/advisories/chat2db-insecure-direct-object-reference-via-get-api-connection-datasource",[82,76,83,84,85],[107,108,90,109],"Third Party Advisory","Not Applicable","Advisory",{"url":111,"sources":112,"tags":114},"https://www.suse.com/security/cve/CVE-2026-63308",[113],"osv_opensuse",[115],"WEB",{"url":117,"sources":118,"tags":119},"https://access.redhat.com/errata/RHSA-2026:55180",[83],[109],{"url":121,"sources":122,"tags":123},"https://access.redhat.com/security/cve/CVE-2026-63308",[83],[97],{"url":125,"sources":126,"tags":127},"https://access.redhat.com/security/updates/classification/",[83],[90],{"url":129,"sources":130,"tags":131},"https://images.redhat.com/",[83],[90],{"url":133,"sources":134,"tags":135},"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_55180.json",[83],[109],{"url":137,"sources":138,"tags":139},"https://bugzilla.redhat.com/show_bug.cgi?id=2501801",[83],[97],{"url":141,"sources":142,"tags":143},"https://www.cve.org/CVERecord?id=CVE-2026-63308",[83],[109],{"url":145,"sources":146,"tags":147},"https://nvd.nist.gov/vuln/detail/CVE-2026-63308",[83,84,85],[109],{"url":149,"sources":150,"tags":151},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63308.json",[84,85],[109],{"url":153,"sources":154,"tags":155},"https://github.com/helm/helm",[84,85],[156],"PACKAGE",[],{"date":159,"score":72,"percentile":160},"2026-09-19",0.20146,[162,166,169,172,175,178,181,184,187,190,193,196,199,202,205,208,211,214,217,220,223,226,229,232,235,238,241,244,247,250,253,256,259,262,265,268,271,274,277,280,283,285,288,291,294,297,300,303,306,309,312,315,318,321,324,326,329,332,335,338,341,344,347,350],{"date":163,"score":164,"percentile":165},"2026-07-18",0.00234,0.14252,{"date":167,"score":164,"percentile":168},"2026-07-19",0.14249,{"date":170,"score":164,"percentile":171},"2026-07-20",0.14348,{"date":173,"score":164,"percentile":174},"2026-07-21",0.14332,{"date":176,"score":164,"percentile":177},"2026-07-22",0.14369,{"date":179,"score":164,"percentile":180},"2026-07-23",0.14355,{"date":182,"score":164,"percentile":183},"2026-07-24",0.14361,{"date":185,"score":164,"percentile":186},"2026-07-25",0.14438,{"date":188,"score":164,"percentile":189},"2026-07-26",0.14429,{"date":191,"score":164,"percentile":192},"2026-07-27",0.14401,{"date":194,"score":164,"percentile":195},"2026-07-28",0.14443,{"date":197,"score":164,"percentile":198},"2026-07-29",0.1443,{"date":200,"score":164,"percentile":201},"2026-07-30",0.14432,{"date":203,"score":72,"percentile":204},"2026-07-31",0.19702,{"date":206,"score":72,"percentile":207},"2026-08-01",0.19701,{"date":209,"score":72,"percentile":210},"2026-08-02",0.19705,{"date":212,"score":72,"percentile":213},"2026-08-03",0.19718,{"date":215,"score":72,"percentile":216},"2026-08-04",0.1966,{"date":218,"score":72,"percentile":219},"2026-08-05",0.19578,{"date":221,"score":72,"percentile":222},"2026-08-06",0.19585,{"date":224,"score":72,"percentile":225},"2026-08-07",0.19596,{"date":227,"score":72,"percentile":228},"2026-08-08",0.19603,{"date":230,"score":72,"percentile":231},"2026-08-09",0.19594,{"date":233,"score":72,"percentile":234},"2026-08-10",0.19595,{"date":236,"score":72,"percentile":237},"2026-08-11",0.19688,{"date":239,"score":72,"percentile":240},"2026-08-12",0.19729,{"date":242,"score":72,"percentile":243},"2026-08-13",0.19752,{"date":245,"score":72,"percentile":246},"2026-08-14",0.19767,{"date":248,"score":72,"percentile":249},"2026-08-15",0.19922,{"date":251,"score":72,"percentile":252},"2026-08-16",0.19953,{"date":254,"score":72,"percentile":255},"2026-08-17",0.1987,{"date":257,"score":72,"percentile":258},"2026-08-18",0.19888,{"date":260,"score":72,"percentile":261},"2026-08-19",0.19957,{"date":263,"score":72,"percentile":264},"2026-08-20",0.19983,{"date":266,"score":72,"percentile":267},"2026-08-21",0.20005,{"date":269,"score":72,"percentile":270},"2026-08-22",0.20013,{"date":272,"score":72,"percentile":273},"2026-08-23",0.20009,{"date":275,"score":72,"percentile":276},"2026-08-24",0.19329,{"date":278,"score":72,"percentile":279},"2026-08-25",0.19344,{"date":281,"score":72,"percentile":282},"2026-08-26",0.1941,{"date":284,"score":72,"percentile":282},"2026-08-27",{"date":286,"score":72,"percentile":287},"2026-08-28",0.19448,{"date":289,"score":72,"percentile":290},"2026-08-29",0.19466,{"date":292,"score":72,"percentile":293},"2026-08-30",0.19486,{"date":295,"score":72,"percentile":296},"2026-08-31",0.19468,{"date":298,"score":72,"percentile":299},"2026-09-01",0.19491,{"date":301,"score":72,"percentile":302},"2026-09-02",0.19505,{"date":304,"score":72,"percentile":305},"2026-09-03",0.19513,{"date":307,"score":72,"percentile":308},"2026-09-04",0.1954,{"date":310,"score":72,"percentile":311},"2026-09-05",0.19583,{"date":313,"score":72,"percentile":314},"2026-09-06",0.19598,{"date":316,"score":72,"percentile":317},"2026-09-07",0.19602,{"date":319,"score":72,"percentile":320},"2026-09-08",0.19612,{"date":322,"score":72,"percentile":323},"2026-09-09",0.1973,{"date":325,"score":72,"percentile":240},"2026-09-10",{"date":327,"score":72,"percentile":328},"2026-09-11",0.19738,{"date":330,"score":72,"percentile":331},"2026-09-12",0.19845,{"date":333,"score":72,"percentile":334},"2026-09-13",0.19803,{"date":336,"score":72,"percentile":337},"2026-09-14",0.19821,{"date":339,"score":72,"percentile":340},"2026-09-15",0.19893,{"date":342,"score":72,"percentile":343},"2026-09-16",0.19964,{"date":345,"score":72,"percentile":346},"2026-09-17",0.20007,{"date":348,"score":72,"percentile":349},"2026-09-18",0.20145,{"date":159,"score":72,"percentile":160},[352,362,367,369,371],{"source":82,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":353,"cvss_v4_0":359},{"baseScore":354,"baseSeverity":355,"vectorString":356,"impactScore":357,"exploitabilityScore":358},4.3,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",2.3,7.2,{"baseScore":360,"baseSeverity":355,"vectorString":361,"impactScore":9,"exploitabilityScore":9},5.3,"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",{"source":76,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":363,"cvss_v4_0":365},{"baseScore":74,"baseSeverity":355,"vectorString":77,"impactScore":364,"exploitabilityScore":358},6,{"baseScore":360,"baseSeverity":355,"vectorString":366,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",{"source":83,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":368,"cvss_v4_0":9},{"baseScore":354,"baseSeverity":9,"vectorString":356,"impactScore":357,"exploitabilityScore":358},{"source":84,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":370},{"baseScore":360,"baseSeverity":9,"vectorString":361,"impactScore":9,"exploitabilityScore":9},{"source":85,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":372},{"baseScore":360,"baseSeverity":9,"vectorString":361,"impactScore":9,"exploitabilityScore":9},[374,384,391,396,399,408,418,424],{"ecosystem":375,"name":376,"vendor":377,"product":376,"cpe_part":9,"purl_type":378,"purl_namespace":377,"purl_name":376,"source":9,"versions":379},"Chainguard","helm-3","chainguard","apk",[380],{"version":381,"is_range":382,"range_type":383,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",true,"ecosystem",{"ecosystem":375,"name":385,"vendor":377,"product":385,"cpe_part":9,"purl_type":378,"purl_namespace":377,"purl_name":385,"source":9,"versions":386},"helm-4",[387],{"version":388,"is_range":382,"range_type":383,"version_start":9,"version_start_type":9,"version_end":389,"version_end_type":390,"fixed_in":9},"lt4_2_4_r0","4.2.4-r0","excluding",{"ecosystem":392,"name":376,"vendor":393,"product":376,"cpe_part":9,"purl_type":378,"purl_namespace":393,"purl_name":376,"source":9,"versions":394},"Wolfi","wolfi",[395],{"version":381,"is_range":382,"range_type":383,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":392,"name":385,"vendor":393,"product":385,"cpe_part":9,"purl_type":378,"purl_namespace":393,"purl_name":385,"source":9,"versions":397},[398],{"version":388,"is_range":382,"range_type":383,"version_start":9,"version_start_type":9,"version_end":389,"version_end_type":390,"fixed_in":9},{"ecosystem":9,"name":400,"vendor":400,"product":400,"cpe_part":401,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":402},"helm","a",[403],{"version":404,"is_range":382,"range_type":405,"version_start":9,"version_start_type":9,"version_end":406,"version_end_type":407,"fixed_in":9},"lte4.2.3","cpe","4.2.3","including",{"ecosystem":409,"name":410,"vendor":411,"product":412,"cpe_part":9,"purl_type":413,"purl_namespace":411,"purl_name":412,"source":9,"versions":414},"openSUSE","helm3","opensuse","helm3&distro=openSUSE Tumbleweed","rpm",[415],{"version":416,"is_range":382,"range_type":383,"version_start":9,"version_start_type":9,"version_end":417,"version_end_type":390,"fixed_in":9},"lt3_21_3_4_1","3.21.3-4.1",{"ecosystem":409,"name":400,"vendor":411,"product":419,"cpe_part":9,"purl_type":413,"purl_namespace":411,"purl_name":419,"source":9,"versions":420},"helm&distro=openSUSE Tumbleweed",[421],{"version":422,"is_range":382,"range_type":383,"version_start":9,"version_start_type":9,"version_end":423,"version_end_type":390,"fixed_in":9},"lt4_2_3_4_1","4.2.3-4.1",{"ecosystem":425,"name":410,"vendor":426,"product":410,"cpe_part":9,"purl_type":413,"purl_namespace":426,"purl_name":410,"source":9,"versions":427},"Red Hat","redhat",[428],{"version":429,"is_range":382,"range_type":383,"version_start":9,"version_start_type":9,"version_end":430,"version_end_type":390,"fixed_in":9},"lt0:3_21_4_0_1_hum1","0:3.21.4-0.1.hum1"]