StackRadar

aws-api-gateway-operator 0.1.2 Helm chart

mintel

Scored 14 Sept 2026

AWS API Gateway Operator Helm chart for Kubernetes

Version 0.1.2 3 years agodeploys tag 7.5.2 0Artifact Hub

aws-api-gateway-operator 0.1.2 deploys 11 container images: docker.elastic.co/kibana/kibana, localstack/localstack, library/docker, mailhog/mailhog and 7 more. Across the 6 measured, 770 findings — 7 critical, 22 high — 4 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.13.0, fixed in 2.15.0.

Radar Score

10,603722178562

770 findings over 6 of 11 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images
ImageTagVulnerabilitiesRadar Score
docker.elastic.co/kibana/kibana7.5.2—unmeasured
localstack/localstacklatest00241982,156
library/docker20.10-dind19381722,787
mailhog/mailhogv1.0.116133778
opensearchproject/opensearch-dashboards1.0.004521132,388
docker.elastic.co/elasticsearch/elasticsearch×27.5.2—unmeasured
bitnami/mariadb10.6.8-debian-10-r0—unmeasured
library/busyboxlatest00000
opensearchproject/opensearch1.1.05351762,494
bitnami/postgresql13.5.0-debian-10-r52—unmeasured
bitnami/redis×26.2.7-debian-10-r23—unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

766 distinct across the version’s images
SeverityAdvisoryPackageFixed in
CriticalGHSA-jfh8-c2jp-5v3qKEVlog4j-core@2.13.02.15.0
CriticalGHSA-36p3-wjmg-h94xKEVspring-beans@5.2.5.RELEASE5.2.20.RELEASE
CriticalALPINE-CVE-2021-3711openssl@1.1.1g-r01.1.1l-r0
CriticalGHSA-7rjr-3q55-vv33KEVlog4j-core@2.13.02.16.0
CriticalGHSA-p6xc-xr62-6r2glog4j-core@2.13.02.17.0
CriticalGHSA-mjmj-j48q-9wg2snakeyaml@1.262.0
CriticalALPINE-CVE-2024-6387openssh@9.3_p1-r39.3_p2-r2
HighALPINE-CVE-2022-0778openssl@1.1.1g-r01.1.1n-r0
HighGHSA-8489-44mv-ggj8log4j-core@2.13.02.17.1
HighALPINE-CVE-2024-6119openssl@3.1.0-r43.1.7-r0
HighALPINE-CVE-2018-25032zlib@1.2.11-r31.2.12-r0
HighALPINE-CVE-2021-23840openssl@1.1.1g-r01.1.1j-r0
HighALPINE-CVE-2023-2650openssl@3.1.0-r43.1.1-r0
HighALPINE-CVE-2021-3712openssl@1.1.1g-r01.1.1l-r0
HighALPINE-CVE-2023-48795openssh@9.3_p1-r39.3_p2-r1
HighGHSA-45x7-px36-x8w8golang.org/x/crypto@v0.2.00.17.0
HighALPINE-CVE-2022-37434zlib@1.2.11-r31.2.12-r2
HighGHSA-v23v-6jw2-98fqgithub.com/docker/docker@v23.0.0-rc.1+incompatible23.0.15
HighGHSA-59j4-wjwp-mw9mvelocity@1.7no fix listed
HighGHSA-qppj-fm5r-hxr3KEVgolang.org/x/net@v0.4.00.17.0
HighGHSA-4v7x-pqxf-cx7mgolang.org/x/net@v0.4.00.23.0
HighALPINE-CVE-2021-3449openssl@1.1.1g-r01.1.1k-r0
HighGHSA-xr7r-f8xq-vfvvgithub.com/opencontainers/runc@v1.1.51.1.12
HighGHSA-r5fr-rjxr-66jclodash-es@4.17.214.18.0
HighGHSA-r5fr-rjxr-66jclodash@4.17.214.18.0
HighALPINE-CVE-2024-2511openssl@3.1.0-r43.1.4-r6
HighGHSA-w573-4hg7-7wgqdecode-uri-component@0.2.00.2.1
HighGHSA-558x-2xjg-6232spring-expression@5.2.5.RELEASE5.2.20.RELEASE
HighGHSA-3jfq-g458-7qm9tar@4.4.134.4.14
MediumGHSA-hrpp-h998-j3ppqs@6.5.26.5.3
MediumGO-2024-2687stdlib@go1.19.71.21.9
MediumGHSA-4jrv-ppp4-jm57gson@2.8.62.8.9
MediumGHSA-5cgq-3rg8-m6cvgolang.org/x/crypto@v0.2.00.52.0
MediumGHSA-3f7h-mf4q-vrm4woodstox-core@6.2.66.4.0
MediumGHSA-p9m8-27x8-rg87cron-utils@9.1.39.1.6
MediumGHSA-xvch-5gv4-984hminimist@1.2.51.2.6
MediumGHSA-r628-mhmh-qjhwtar@4.4.134.4.15
MediumALPINE-CVE-2024-5535openssl@3.1.0-r43.1.6-r0
MediumGHSA-mm9x-g8pc-w292netty-handler@4.1.45.Final4.1.46
MediumGHSA-wm47-8v5p-wjpjnetty-codec-http2@4.1.45.Final4.1.60.Final
MediumGHSA-896r-f27r-55mwjson-schema@0.2.30.4.0
MediumGHSA-9c47-m6qq-7p4hjson5@2.1.32.2.2
MediumGHSA-j8wc-gxx9-82hxxmlsec@2.2.02.2.3
MediumDEBIAN-CVE-2019-1010022glibc@2.41-12+deb13u3no fix listed
MediumALPINE-CVE-2022-48174busybox@1.36.0-r91.36.1-r1
MediumDEBIAN-CVE-2017-17740openldap@2.6.10+dfsg-1no fix listed
MediumGHSA-9vjp-v76f-g363netty-codec@4.1.45.Final4.1.68.Final
MediumGHSA-wr6v-9f75-vh2ggithub.com/moby/buildkit@v0.11.20.12.5
MediumGHSA-76p3-8jx3-jpfqloader-utils@2.0.02.0.3
MediumGHSA-grg4-wf29-r9vvnetty-codec@4.1.45.Final4.1.68.Final

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.2latest3 years ago7.5.272217856210,603

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/mintel/aws-api-gateway-operator.svg)](https://charts.stackradar.io/charts/mintel/aws-api-gateway-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.