Is Helm 4.1.0 affected?
Jan 21, 2026 · Release notes ↗
3 known vulnerabilities affect 4.1.0 (highest CVSS 9.3).
10 newer releases in its track, up to 4.3.1. What changed up to 4.3.1
Vulnerabilities affecting 4.1.0
- 9.3 CVE-2026-35205 Plugin verification fails open when `.prov` is missing, allowing unsigned plugin install
- 8.4 CVE-2026-35204 Path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory
- 4.8
Newer releases
| 4.3.1 | Oct 15, 2026 | 4.1.0 → 4.3.1 |
| 4.3.0 | Sep 9, 2026 | 4.1.0 → 4.3.0 |
| 4.2.4 | Aug 13, 2026 | 4.1.0 → 4.2.4 |
| 4.2.3 | Jul 9, 2026 | 4.1.0 → 4.2.3 |
| 4.2.2 | Jun 17, 2026 | 4.1.0 → 4.2.2 |
| 4.2.1 | Jun 12, 2026 | 4.1.0 → 4.2.1 |
| 4.2.0 | May 14, 2026 | 4.1.0 → 4.2.0 |
| 4.1.4 | Apr 9, 2026 | 4.1.0 → 4.1.4 |
| 4.1.3 | Mar 11, 2026 | 4.1.0 → 4.1.3 |
| 4.1.1 | Feb 9, 2026 | 4.1.0 → 4.1.1 |