StackRadar

GHSA-747p-wmpv-9c78

Medium

Advisory

Published 27 Feb 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
44
of 17,781 indexed, latest versions
Container images
41
deployed by those charts
Fix available
1 of 1
affected package

AWS CLI: cli_history database does not restrict file permissions on Unix systems

Carried by container images the latest versions of 44 of 17,781 indexed charts deploy, on 41 images.

Affected packageAffected versionsFixed inImages
awsclipypi1.16.47, 1.16.110, 1.16.214, 1.16.278+33 more1.44.3841
OSV records
GHSA-747p-wmpv-9c78

Charts affected

44 by stars
ChartLatestAffected imagesRadar Score
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
awscli@1.36.22
1.44.38

Open the chart page →

4,531
aws-ecr-credentialarchitectminds1.4.21 of 1See more

aws-ecr-credential architectminds 1.4.2

1 of the 1 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
architectminds/aws-kubectl:1.19735e59a1085
awscli@1.16.214
1.44.38

Open the chart page →

1,437
karporkusionstackVerified publisher0.7.61 of 3See more

karpor kusionstack 0.7.6

1 of the 3 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
kusionstack/karpor:v0.6.4b707d3bf0abd
awscli@1.25.97
1.44.38

Open the chart page →

3,295
oesopsmxVerified publisher4.0.322 of 25See more

oes opsmx 4.0.32

2 of the 25 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/awsgit:v2-openssh0d21ba756f44
awscli@1.22.55
1.44.38
quay.io/opsmxpublic/awsgit:v3-js15a6faada3d4
awscli@1.23.7
1.44.38

Open the chart page →

107,811
upcloud-csiankra-chartsVerified publisher0.4.01 of 8See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
awscli@1.42.38
1.44.38

Open the chart page →

14,917
spinnakerdwardu-helm-charts2.2.61 of 2See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
awscli@1.18.18
1.44.38

Open the chart page →

8,752
mlflow-servermlflowserver0.1.91 of 3See more

mlflow-server mlflowserver 0.1.9

1 of the 3 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
buntha/mlflow:2.1.1154542cc3083
awscli@1.27.37
1.44.38

Open the chart page →

5,804
routehub-client-hubroutehub-helm1.0.01 of 3See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg16d7db8f1085a3
awscli@1.22.34
1.44.38

Open the chart page →

12,930
mysql-backupsoftonic2.2.31 of 1See more

mysql-backup softonic 2.2.3

1 of the 1 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
softonic/mysql-backup:0.4.0d9487a8dd70f
awscli@1.22.32
1.44.38

Open the chart page →

547
upbot-operatorupbot-operator0.0.201 of 2See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
alpine/k8s:1.28.13e5c0b053fed7
awscli@1.34.0
1.44.38

Open the chart page →

4,460
pghoardwiremindVerified publisher0.8.11 of 1See more

pghoard wiremind 0.8.1

1 of the 1 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
wiremind/pghoard:12-2019-11-264dea42c8166c
awscli@1.16.291
1.44.38

Open the chart page →

2,952
backupalexanderbadel1.1.01 of 1See more

backup alexanderbadel 1.1.0

1 of the 1 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
ghcr.io/alexanderbabel/database-s3-backup:1.3.33191b771a6f2
awscli@1.18.97
1.44.38

Open the chart page →

2,803
argocd-ecr-updaterargocd-ecr-updater4.1.01 of 1See more

argocd-ecr-updater argocd-ecr-updater 4.1.0

1 of the 1 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
odaniait/aws-kubectl:latest3fff8a8570ec
awscli@1.18.41
1.44.38

Open the chart page →

1,511
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
awscli@1.22.34
1.44.38

Open the chart page →

32,501
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
awscli@1.32.27
1.44.38

Open the chart page →

9,412
aws-ecr-credentialaws-ecr-credentialVerified publisher1.5.21 of 1See more

aws-ecr-credential aws-ecr-credential 1.5.2

1 of the 1 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
architectminds/aws-kubectl:1.19735e59a1085
awscli@1.16.214
1.44.38

Open the chart page →

1,437
aws-secrets-synchronizeraws-secrets-synchronizer0.2.11 of 1See more

aws-secrets-synchronizer aws-secrets-synchronizer 0.2.1

1 of the 1 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
ghcr.io/reezogit/aws-secrets-synchronizer:0.2.1111ed7cf7b39
awscli@1.29.4
1.44.38

Open the chart page →

956
ekorrecamptocamp30.1.11 of 1See more

ekorre camptocamp3 0.1.1

1 of the 1 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
camptocamp/ekorre:0.1.035c91d5fda04
awscli@1.18.6
1.44.38

Open the chart page →

3,891
pghoardcamptocamp35.8.11 of 1See more

pghoard camptocamp3 5.8.1

1 of the 1 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
camptocamp/pghoard:10bff736b15623
awscli@1.16.47
1.44.38

Open the chart page →

2,813
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
awscli@1.38.13
1.44.38

Open the chart page →

15,027
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
awscli@1.22.34
1.44.38

Open the chart page →

20,900
k8s-spot-termination-handlercloudnativeapp1.2.11 of 1See more

k8s-spot-termination-handler cloudnativeapp 1.2.1

1 of the 1 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
kubeaws/kube-spot-termination-notice-handler:1.13.0-1c9cd2ba4373a
awscli@1.16.110
1.44.38

Open the chart page →

2,095
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
awscli@1.22.99
1.44.38

Open the chart page →

6,695
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
awscli@1.25.6
1.44.38

Open the chart page →

6,921
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
awscli@1.16.278
1.44.38

Open the chart page →

27,728
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
awscli@1.16.278
1.44.38

Open the chart page →

24,335
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
awscli@1.18.80
1.44.38

Open the chart page →

10,466
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
awscli@1.18.80
1.44.38

Open the chart page →

10,466
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
awscli@1.22.34
1.44.38

Open the chart page →

24,917
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
awscli@1.29.62
1.44.38

Open the chart page →

3,659
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
awscli@1.43.0
1.44.38

Open the chart page →

8,923
siembolgresearch0.1.61 of 4See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
alpine/k8s:1.18.16a41efe02a041
awscli@1.20.6
1.44.38

Open the chart page →

14,312
koptimizejaconiVerified publisher0.5.41 of 2See more

koptimize jaconi 0.5.4

1 of the 2 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
alpine/k8s:1.27.321b24e6bf801
awscli@1.27.155
1.44.38

Open the chart page →

5,713
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
alpine/k8s:1.22.600ac10bcb759
awscli@1.22.88
1.44.38

Open the chart page →

14,801
scriptskfirfer0.1.361 of 1See more

scripts kfirfer 0.1.36

1 of the 1 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
kfirfer/scripts:0.0.2481e5c4e5d70e
awscli@1.27.53
1.44.38

Open the chart page →

2,320
kubestellar-consolekubestellar-consoleVerified publisher0.3.411 of 2See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
alpine/k8s:1.32.47e1e7d5b7a96
awscli@1.40.2
1.44.38

Open the chart page →

4,439
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
awscli@1.40.40
1.44.38

Open the chart page →

17,070
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
awscli@1.35.5
1.44.38

Open the chart page →

5,826
postgresql-backupphntom0.1.91 of 1See more

postgresql-backup phntom 0.1.9

1 of the 1 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
phntom/postgresql-backup-s3:1.0.2249b6488f618b
awscli@1.27.23
1.44.38

Open the chart page →

2,556
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
awscli@1.33.18
1.44.38

Open the chart page →

25,934
prismeai-appsprismeai0.7.11 of 4See more

prismeai-apps prismeai 0.7.1

1 of the 4 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
awscli@1.44.14
1.44.38

Open the chart page →

2,751
prismeai-coreprismeai1.12.11 of 7See more

prismeai-core prismeai 1.12.1

1 of the 7 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
awscli@1.44.14
1.44.38

Open the chart page →

3,270
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
awscli@1.32.88
1.44.38

Open the chart page →

4,038
argocdromholdings1.8.11 of 3See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry GHSA-747p-wmpv-9c78.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
awscli@1.18.80
1.44.38

Open the chart page →

10,466

Container images carrying it

41 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
argoproj/argocd:v1.8.1830e86cacefd
awscli@1.18.80
1.44.38
3
architectminds/aws-kubectl:1.19735e59a1085
awscli@1.16.214
1.44.38
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
awscli@1.44.14
1.44.38
2
alpine/k8s:1.22.600ac10bcb759
awscli@1.22.88
1.44.38
1
alpine/k8s:1.27.321b24e6bf801
awscli@1.27.155
1.44.38
1
alpine/k8s:1.31.106dbe6f391eda
awscli@1.40.40
1.44.38
1
alpine/k8s:1.31.137a319b15cfc9
awscli@1.42.38
1.44.38
1
alpine/k8s:1.32.47e1e7d5b7a96
awscli@1.40.2
1.44.38
1
alpine/k8s:1.31.49c4976d47656
awscli@1.36.22
1.44.38
1
alpine/k8s:1.18.16a41efe02a041
awscli@1.20.6
1.44.38
1
alpine/k8s:1.30.0bd01dae02676
awscli@1.32.88
1.44.38
1
alpine/k8s:1.30.2cd560fce90f7
awscli@1.33.18
1.44.38
1
alpine/k8s:1.28.13e5c0b053fed7
awscli@1.34.0
1.44.38
1
alpine/k8s:1.32.3eec354133193
awscli@1.38.13
1.44.38
1
alpine/k8s:1.28.2fc059f056ad0
awscli@1.29.62
1.44.38
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
awscli@1.43.0
1.44.38
1
buntha/mlflow:2.1.1154542cc3083
awscli@1.27.37
1.44.38
1
camptocamp/ekorre:0.1.035c91d5fda04
awscli@1.18.6
1.44.38
1
camptocamp/pghoard:10bff736b15623
awscli@1.16.47
1.44.38
1
kfirfer/scripts:0.0.2481e5c4e5d70e
awscli@1.27.53
1.44.38
1
kubeaws/kube-spot-termination-notice-handler:1.13.0-1c9cd2ba4373a
awscli@1.16.110
1.44.38
1
kusionstack/karpor:v0.6.4b707d3bf0abd
awscli@1.25.97
1.44.38
1
localstack/localstack:3.19d278167f2b7
awscli@1.32.27
1.44.38
1
odaniait/aws-kubectl:latest3fff8a8570ec
awscli@1.18.41
1.44.38
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
awscli@1.35.5
1.44.38
1
opendatacube/restcube:latest91870111837c
awscli@1.16.278
1.44.38
1
opendatacube/wms:latest1b90cdf68831
awscli@1.16.278
1.44.38
1
phntom/postgresql-backup-s3:1.0.2249b6488f618b
awscli@1.27.23
1.44.38
1
softonic/mysql-backup:0.4.0d9487a8dd70f
awscli@1.22.32
1.44.38
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
awscli@1.22.34
1.44.38
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
awscli@1.22.34
1.44.38
1
timescale/timescaledb-ha:pg16d7db8f1085a3
awscli@1.22.34
1.44.38
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
awscli@1.22.34
1.44.38
1
wiremind/pghoard:12-2019-11-264dea42c8166c
awscli@1.16.291
1.44.38
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
awscli@1.18.18
1.44.38
1
ghcr.io/alexanderbabel/database-s3-backup:1.3.33191b771a6f2
awscli@1.18.97
1.44.38
1
ghcr.io/reezogit/aws-secrets-synchronizer:0.2.1111ed7cf7b39
awscli@1.29.4
1.44.38
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
awscli@1.25.6
1.44.38
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
awscli@1.22.99
1.44.38
1
quay.io/opsmxpublic/awsgit:v2-openssh0d21ba756f44
awscli@1.22.55
1.44.38
1
quay.io/opsmxpublic/awsgit:v3-js15a6faada3d4
awscli@1.23.7
1.44.38
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.