Impact Score: 5/10
Helm v3.19.4
Source available โ automated, not human-reviewed
Component: helm ยท Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
โก Executive Summary (TL;DR)
Helm v3.19.4. Source highlight: Helm v3.19.4 is a security fix for a Go CVE in the previous tag. This patch release rebuilds the Helm `v3.19.3` release with the latest Go toolchain, to fix the Go CVE. Users are encouraged to upgrade.
Who Does This Impact? (Role-Based Analysis)
๐ป Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
๐ Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
โ๏ธ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
๐ง Bug Fixes & Patches (4)
- for discussing PRs, code, and bugs
- Test, debug, and contribute charts: ArtifactHub/packages
- 3.19.5 and 4.0.4 are the next patch releases and will be on January 14, 2026
- Use latest patch release of Go in releases 7cfb6e486dac026202556836bb910c37d847793e (Matt Farina)
๐ View Raw Release Notes (Original Developer Log)
Helm v3.19.4 is a security fix for a Go CVE in the previous tag. This patch release rebuilds the Helm `v3.19.3` release with the latest Go toolchain, to fix the Go CVE. Users are encouraged to upgrade.
The community keeps growing, and we'd love to see you there!
- Join the discussion in [Kubernetes Slack](https://kubernetes.slack.com):
- for questions and just to hang out
- for discussing PRs, code, and bugs
- Hang out at the Public Developer Call: Thursday, 9:30 Pacific via [Zoom](https://zoom.us/j/696660622)
- Test, debug, and contribute charts: [ArtifactHub/packages](https://artifacthub.io/packages/search?kind=0)
## Installation and Upgrading
Download Helm v3.19.4. The common platform binaries are here:
- [MacOS amd64](https://get.helm.sh/helm-v3.19.4-darwin-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.19.4-darwin-amd64.tar.gz.sha256sum) / d9c9b1fc499c54282c4127c60cdd506da2c6202506b708a2b45fb6dfdb318f43)
- [MacOS arm64](https://get.helm.sh/helm-v3.19.4-darwin-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.19.4-darwin-arm64.tar.gz.sha256sum) / 7e82ca63fe80a298cecefad61d0c10bc47963ff3551e94ab6470be6393a6a74b)
- [Linux amd64](https://get.helm.sh/helm-v3.19.4-linux-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.19.4-linux-amd64.tar.gz.sha256sum) / 759c656fbd9c11e6a47784ecbeac6ad1eb16a9e76d202e51163ab78504848862)
- [Linux arm](https://get.helm.sh/helm-v3.19.4-linux-arm.tar.gz) ([checksum](https://get.helm.sh/helm-v3.19.4-linux-arm.tar.gz.sha256sum) / fcbb21b657c46ad646542964c262c4efb595bc60621e34273c1a2bb92eaff1dc)
- [Linux arm64](https://get.helm.sh/helm-v3.19.4-linux-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.19.4-linux-arm64.tar.gz.sha256sum) / 9e1064f5de43745bdedbff2722a1674d0397bc4b4d8d8196d52a2b730909fe62)
- [Linux i386](https://get.helm.sh/helm-v3.19.4-linux-386.tar.gz) ([checksum](https://get.helm.sh/helm-v3.19.4-linux-386.tar.gz.sha256sum) / 5bbf5541cb021c021a7f5b3e59e3808cc09678aa2650ece24c78f8a277466c0b)
- [Linux ppc64le](https://get.helm.sh/helm-v3.19.4-linux-ppc64le.tar.gz) ([checksum](https://get.helm.sh/helm-v3.19.4-linux-ppc64le.tar.gz.sha256sum) / a38d8f75406f9bc3e12d1ebf8819fd563a5156ada6fe665402732932eec9c743)
- [Linux s390x](https://get.helm.sh/helm-v3.19.4-linux-s390x.tar.gz) ([checksum](https://get.helm.sh/helm-v3.19.4-linux-s390x.tar.gz.sha256sum) / d153b3a316ce3f2936e601d94db5909aae4fbd5d1a4b28760fad2dd18c2bb749)
- [Linux riscv64](https://get.helm.sh/helm-v3.19.4-linux-riscv64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.19.4-linux-riscv64.tar.gz.sha256sum) / 9d90a7532b426e5d99edfa9fa93e1dba4729f96a3b493974e847651a9aa34020)
- [Windows amd64](https://get.helm.sh/helm-v3.19.4-windows-amd64.zip) ([checksum](https://get.helm.sh/helm-v3.19.4-windows-amd64.zip.sha256sum) / 18e7d1b970dfb6f4f8ddbbd1659d75d90ca818a47519411c4cc305b918508d36)
- [Windows arm64](https://get.helm.sh/helm-v3.19.4-windows-arm64.zip) ([checksum](https://get.helm.sh/helm-v3.19.4-windows-arm64.zip.sha256sum) / da870dbb870e5cad243f5c7dca54f27be289237a97d84077c885769a06394223)
This release was signed with `208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155` and can be found at @scottrigby [keybase account](https://keybase.io/r6by). Please use the attached signatures for verifying this release using `gpg`.
The [Quickstart Guide](https://helm.sh/docs/intro/quickstart/) will get you going from there. For **upgrade instructions** or detailed installation notes, check the [install guide](https://helm.sh/docs/intro/install/). You can also use a [script to install](https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3) on any system with `bash`.
## What's Next
- 3.19.5 and 4.0.4 are the next patch releases and will be on January 14, 2026
- 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026
## Changelog
- Use latest patch release of Go in releases 7cfb6e486dac026202556836bb910c37d847793e (Matt Farina)
- chore(deps): bump github.com/gofrs/flock from 0.12.1 to 0.13.0 59c951f309511dcb017900b6a19836e5bcbade04 (dependabot[bot])
- chore(deps): bump github.com/cyphar/filepath-securejoin d45f3f15dfbc05320add596102ce3ae220825ff1 (dependabot[bot])
- chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 d4595449c7bd2a82f1ae23b11711f2b7b219ed32 (dependabot[bot])
- chore(deps): bump golang.org/x/term from 0.36.0 to 0.37.0 becd3876eb126cb83d8571e6e3826645e941d400 (dependabot[bot])
- chore(deps): bump the k8s-io group with 7 updates edb1579fd0d9ed81fb451ce03c68bd6365374173 (dependabot[bot])