These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-63308 is a denial of service vulnerability in the Files.Lines template helper in Helm, a popular package manager for Kubernetes. The vulnerability allows attackers to trigger an index out of range panic by including zero-length byte slices in chart files. This can be exploited by including empty files in Helm charts, causing deterministic render failures across various operations, including templ [truncated]
CVE-2026-35205 is a high-severity vulnerability in Helm, a package manager for Kubernetes Charts. From version 4.0.0 to 4.1.3, Helm installs plugins missing provenance (.prov file) when signature verification is required. This issue is fixed in version 4.1.4. The vulnerability has a CVSS score of 8.4 and is considered HIGH severity. The CVE was published on April 9, 2026, and last modified on June 30, 2026.
CVE-2026-35204 is a high-severity vulnerability in Helm, a package manager for Kubernetes. The vulnerability allows a specially crafted Helm plugin to write to an arbitrary filesystem location. This issue was present in Helm versions 4.0.0 to 4.1.3 and was fixed in version 4.1.4. The vulnerability has a CVSS score of 8.4 and is classified as HIGH. The CVE was published on April 9, 2026, and last modified [truncated]