Threats tagged 'bit-helm-2026-35205'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	–	EPSS 0.2%	CVE-2026-35205BIT-helm-2026-35205: Helm's plugin verification fails open when .prov is missing, allowing unsigned plugin install HighEPSS 0.2%2026-04-13GCVE DatabaseCVE-2026-35205 Helm versions from 4.0.0 up to but not including 4.1.4 have a vulnerability where plugin signature verification fails open if the provenance (.prov) file is missing. This allows installation of unsigned plugins even when signature verification is required. The issue is fixed in Helm version 4.1.4. EPSS 0.2%Vulnerability #bit-helm-2026-35205 #bitnami	GCVE Database	2026-04-13

Page 1 of 1