Helm (Product): news timeline & CVEs

Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts

Wiz releases hardened WizOS Helm charts after finding supply-chain risks in 61 popular chart repositories.

Wiz introduced secured Helm charts for WizOS, maintained to the same hardening standards as its base images. Wiz Research reviewed build pipelines behind 1,500 popular Artifact Hub charts, mapping them to 814 GitHub repositories. Sixty-one repositories (7.5 percent) had a confirmed supply-chain risk, including nine critical or high findings, weak CI/CD in 20 charts, and unmaintained upstreams in 25. KubeView’s go.mod pointed at a nonexistent GitHub user, fixed in 2.2.1, and Meilisearch’s chart workflow allowed script injection from any commenter; both issues were reported and fixed.

Wiz BlogSep 30, 15:52 UTC · 8h agoTools

EU Cyber Resilience Act requirements for containers and Kubernetes

The EU Cyber Resilience Act imposes SBOM, patching, and 24-hour exploit reporting duties on container and Kubernetes products.

Help Net Security outlined how the EU Cyber Resilience Act (Regulation 2024/2847) applies to container images, commercial Kubernetes operators, and supported Helm charts offered to EU customers. Obligations include hardened secure-by-default images, SBOMs with continuous vulnerability monitoring, and under Article 14 an early warning to ENISA within 24 hours of learning a vulnerability is actively exploited, plus a full notification within 72 hours. Article 13 requires security updates for at least five years or the expected product lifetime. The piece describes reporting obligations as starting September 11, 2026, with full enforcement on December 11, 2027.

Help Net SecuritySep 30, 05:00 UTC · 19h agoPolicy & legal

Helm

Timeline2 articles

Appears with

Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts

EU Cyber Resilience Act requirements for containers and Kubernetes