vulnerability in k8sgpt project

While working on k8sgpt project, I discovered that the helm.sh/helm/v3 package has a critical vulnerability related to code injection. It occurs when a malicious Chart.yaml is used in combination with a symlinked Chart.lock file.

CVE Links CVE Report