←back to thread

Helm local code execution via a malicious chart

(github.com)
171 points irke882 | 3 comments | 09 Jul 25 05:49 UTC | HN request time: 0.995s | source
Show context
quotemstr ◴[09 Jul 25 08:02 UTC] No.44507375[source]▶
But I thought security vulnerabilities couldn't happen in memory-safe languages!
replies(3): >>44507845 #>>44508369 #>>44513650 #
1. junon ◴[09 Jul 25 10:46 UTC] No.44508369[source]▶
This isn't a memory bug.
replies(1): >>44510814 #
2. mdaniel ◴[09 Jul 25 14:58 UTC] No.44510814[source]▶
And Helm isn't written in Rust, so their snark was doubly misplaced
replies(1): >>44511876 #
3. dilyevsky ◴[09 Jul 25 16:21 UTC] No.44511876[source]▶
Fwiw, Go is also considered memory-safe although not as strict as Rust