-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| helm.sh/helm/v3 | go | < 3.14.2 | 3.14.2 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from missing nil checks for Metadata fields in YAML parsing. The commit diff shows fixes in index.go (repo package) and plugin.go (plugin package) initializing these fields. The impact description explicitly names LoadIndexFile(), DownloadIndexFile(), and LoadDir() as entry points. These functions process YAML content that could lack metadata sections, leading to panics when accessing uninitialized structs.