Orchestration

Helm: what changed

In the last 90 days, 11 summarized changes: 1 security advisories, 4 releases, 6 fixes. Stackdiff reads Helm's own feeds (helm.sh) and writes two sentences per change with a link to the source; it never republishes release notes. Sources last checked .

Needs attention

Breaking changes, security advisories, end-of-life and license changes from the last 90 days, worst first.

3.20.2Securitymedium
GO-2026-5435: Helm Chart extraction output directory collapse via Chart.yaml name dot-segment in helm.sh/helm

End of life

Support windows from endoflife.date. An entry appears the day a date enters the 120-day horizon.

CycleWhatPublished
Helm 3 End of Life

Latest changes

Newest first, every type. Releases and fixes sit below anything that can hurt you in the weekly brief; here they are in order.

3.22.0Release
Helm v3.22.0
4.3.0Release
Helm v4.3.0
3.22.0-rc.1Release
Helm v3.22.0-rc.1
4.3.0-rc.1Release
Helm v4.3.0-rc.1
4.2.4Fix
Helm v4.2.4
3.21.4Fix
Helm v3.21.4
3.20.2Securitymedium
GO-2026-5435: Helm Chart extraction output directory collapse via Chart.yaml name dot-segment in helm.sh/helm
3.21.3Fix
Helm v3.21.3
4.2.3Fix
Helm v4.2.3
3.21.2Fix
Helm v3.21.2
4.2.2Fix
Helm v4.2.2
End of lifehigh
Helm 3 End of Life
Securitymedium
Security Notice: Former Helm APT Mirror Domain `baltocdn.com` Statement
3.20.2Securitymedium
GHSA-hr2v-4r36-88hr: Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment
News
Helm 4 Released
Keynote
Helm @ KubeCon + CloudNativeCon NA '25
News
Helm Turns 10
Breakinghigh
Path To Releasing Helm v4
News
Debian/Ubuntu Helm Apt Repository Move
3.18.5Securitymedium
GHSA-f9f8-9pmf-xv68: Helm May Panic Due To Incorrect YAML Content
3.18.5Securitymedium
GHSA-9h84-qmv7-982p: Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion
3.17.4Securitymedium
GHSA-557j-xg8c-q2mm: Helm vulnerable to Code Injection through malicious chart.yaml content
3.17.3Securitymedium
GHSA-5xqw-8hwv-wg92: Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow
3.17.3Securitymedium
GHSA-4hfp-h4cw-hj8p: Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination
Keynote
Helm @ KubeCon + CloudNativeCon EU '25
Keynote
Experience a Helm Release: Live at KubeCon + CloudNativeCon North America 2024!
Keynote
Helm at KubeCon/CloudNativeCon SLC
News
Helm 2to3 is Now Unsupported
News
The Road to Helm 4
Securitymedium
Response To CVE-2019-25210

Where Stackdiff reads Helm

Only what the vendor publishes for machines. Excerpts are capped, summaries are our own two sentences, and every line links back.

Get Helm changes in your Monday brief

Add Helm and the rest of your stack; breaking changes and CVEs go out the moment they're seen, everything else on Monday.

Get your first brief

Other orchestration tools