wecas.blogg.se

For example, a malicious chart could inject getHostByName into a chart in order to disclose values to a malicious DNS server. Information passed into the chart can be disclosed to the DNS servers used to lookup the IP address. The DNS lookup happens when used with helm install|upgrade|template or when the Helm SDK is used to render a chart. To get the IP address the function performs a DNS lookup. The function is able to accept a hostname and return an IP address for that hostname. GetHostByName is a Helm template function introduced in Helm v3. GitHub Vulnerability Alerts CVE-2023-25165Ī Helm contributor discovered an information disclosure vulnerability using the getHostByName template function. Please check the Dependency Dashboard for more information. Warnings were logged while processing this repo. This PR contains the following updates: Package