CVE catalog

CVE-2025-32386

govulncheck-vulndb-0.0.20250410T162706-1.1 on GA media

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.46% · Oct 25, 2026

This update for helm-mirror fixes the following issues: - CVE-2025-32386: Fixed denial of service due to memory exhaustion after loading a specially crafter chart (bsc#1241028) - CVE-2025-32387: Fixed stack overflow due to parser recursion that can exceed the stack size limit (bsc#1241031)

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Susehelm-mirrorlinux enterprise module for containers 15 sp60.3.1-150000.1.18.2fixed
Opensusehelm-mirrorleap 15.60.3.1-150000.1.18.2fixed
Susehelm-mirrorlinux enterprise module for containers 15 sp70.3.1-150000.1.18.2fixed
Opensusegovulncheck-vulndbtumbleweed0.0.20250410T162706-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Susehelm-mirrorrpmlinux enterprise module for containers 15 sp60.3.1-150000.1.18.2Not reportedSUSE-SU-2025:01830-1Not reported
Opensusehelm-mirrorrpmleap 15.60.3.1-150000.1.18.2Not reportedSUSE-SU-2025:01830-1Not reported
Susehelm-mirrorrpmlinux enterprise module for containers 15 sp70.3.1-150000.1.18.2Not reportedSUSE-SU-2025:01830-2Not reported
Opensusegovulncheck-vulndbrpmtumbleweed0.0.20250410T162706-1.1Not reportedOPENSUSE-SU-2025:14995-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [govulncheck-vulndb]Fixed

    Source package: [govulncheck-vulndb]

    Details (1)

    • 0.0.20260828T144745-1.1 · noarch · tumbleweed

      Fixed · Fixed: 0.0.20250410T162706-1.1

      pypi · govulncheck-vulndb · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]