StackRadar

GHSA-j965-2qgj-vjmq

Low

Advisory

Published 8 Jan 2026In the index since 6 Sept 2026
Severity
Low
worst across findings
CVSS
3.7
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
56
of 17,781 indexed, latest versions
Container images
45
deployed by those charts
Fix available
None
affected package

JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3

Carried by container images the latest versions of 56 of 17,781 indexed charts deploy, on 45 images.

Affected packageAffected versionsFixed inImages
aws-sdknpm2.57.0, 2.171.0, 2.628.0, 2.667.0+23 moreno fix listed45
OSV records
GHSA-j965-2qgj-vjmq

Charts affected

56 by stars
ChartLatestAffected imagesRadar Score
kubernetes-external-secretstrozz6.3.01 of 1See more

kubernetes-external-secrets trozz 6.3.0

1 of the 1 container images this version deploys carry GHSA-j965-2qgj-vjmq.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
aws-sdk@2.628.0
no fix listed

Open the chart page →

2,838
hedgedocvista0.1.11 of 1See more

hedgedoc vista 0.1.1

1 of the 1 container images this version deploys carry GHSA-j965-2qgj-vjmq.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
aws-sdk@2.1171.0
no fix listed

Open the chart page →

3,118
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry GHSA-j965-2qgj-vjmq.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.14.491c8d793746f
aws-sdk@2.1271.0
no fix listed

Open the chart page →

5,484
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry GHSA-j965-2qgj-vjmq.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
aws-sdk@2.1693.0
no fix listed

Open the chart page →

5,459
workadventureworkadventure1.1.01 of 9See more

workadventure workadventure 1.1.0

1 of the 9 container images this version deploys carry GHSA-j965-2qgj-vjmq.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
aws-sdk@2.1426.0
no fix listed

Open the chart page →

16,083
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry GHSA-j965-2qgj-vjmq.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:2.18.00ecd8444add2
aws-sdk@2.1271.0
no fix listed

Open the chart page →

9,381

Container images carrying it

45 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
aws-sdk@2.1693.0
no fix listed
3
agoldis/sorry-cypress-director:2.5.1110228ecd353b
aws-sdk@2.814.0
no fix listed
2
mesosphere/kommander:6.100.13917e82333a9
aws-sdk@2.831.0
no fix listed
2
migmartri/prerender:latest486aacfd5aa9
aws-sdk@2.57.0
no fix listed
2
outlinewiki/outline:0.69.1d060dcd8f9aa
aws-sdk@2.1290.0
no fix listed
2
requarks/wiki:2:latest68f0d1848261
aws-sdk@2.1693.0
no fix listed
2
taskrabbit/elasticsearch-dump:latestc967fe68b9c7
aws-sdk@2.667.0
no fix listed
2
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
aws-sdk@2.880.0
no fix listed
2
ghcr.io/quenchworks/images/coolify-realtimef128e512c9c0
aws-sdk@2.1426.0
no fix listed
2
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
aws-sdk@2.1171.0
no fix listed
2
linuxserver/codimd:latestb801bbcf6386
aws-sdk@2.815.0
no fix listed
1
lissy93/dashy:2.0.51991f7be5ed0
aws-sdk@2.880.0
no fix listed
1
misskey/misskey:12.110.1e08b7c478093
aws-sdk@2.1111.0
no fix listed
1
n8nio/n8n:0.212.0a9195bc499a3
aws-sdk@2.1297.0
no fix listed
1
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
aws-sdk@2.1692.0
no fix listed
1
nocodb/nocodb:0.258.06779a4ddedf2
aws-sdk@2.1692.0
no fix listed
1
opensearchproject/opensearch-dashboards:2.18.00ecd8444add2
aws-sdk@2.1271.0
no fix listed
1
opensearchproject/opensearch-dashboards:2.10.0485a0019e5d6
aws-sdk@2.1214.0
no fix listed
1
opensearchproject/opensearch-dashboards:2.15.0b7c26c60bfaf
aws-sdk@2.1271.0
no fix listed
1
requarks/wiki:canary-2.5.2438b5865a7386c
aws-sdk@2.778.0
no fix listed
1
roadiehq/community-backstage-image:latestef355bf5b639
aws-sdk@2.948.0
no fix listed
1
shinobisystems/shinobi:dev3ca746937856
aws-sdk@2.924.0
no fix listed
1
shinobisystems/shinobi:latestc2f5ce2e1067
aws-sdk@2.924.0
no fix listed
1
socialmediamacroscope/smile_server:0.3.31a528c794270
aws-sdk@2.1058.0
no fix listed
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
aws-sdk@2.1547.0
no fix listed
1
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
aws-sdk@2.1426.0
no fix listed
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
aws-sdk@2.1052.0
no fix listed
1
wazuh/wazuh-dashboard:4.11.10c58e7b47bb6
aws-sdk@2.1271.0
no fix listed
1
wazuh/wazuh-dashboard:4.4.11787550d2358
aws-sdk@2.1214.0
no fix listed
1
wazuh/wazuh-dashboard:4.14.491c8d793746f
aws-sdk@2.1271.0
no fix listed
1
wazuh/wazuh-dashboard:4.14.391e4f0a7feed
aws-sdk@2.1271.0
no fix listed
1
wiremind/scrapoxy:lateste7048929a676
aws-sdk@2.171.0
no fix listed
1
zooz/predator:1.6f491d1f7a865
aws-sdk@2.814.0
no fix listed
1
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
aws-sdk@2.628.0
no fix listed
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
aws-sdk@2.1692.0
no fix listed
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
aws-sdk@2.738.0
no fix listed
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
aws-sdk@2.778.0
no fix listed
1
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
aws-sdk@2.1536.0
no fix listed
1
ghcr.io/openccu/openccu:3.89.8.20260719b2de2ff6e8e0
aws-sdk@2.1693.0
no fix listed
1
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
aws-sdk@2.1693.0
no fix listed
1
quay.io/soketi/pws:0.8-16-alpine399d2e6b10ef
aws-sdk@2.1001.0
no fix listed
1
quay.io/soketi/soketi:1.6-16-debian713223456cf1
aws-sdk@2.1426.0
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
aws-sdk@2.1692.0
no fix listed
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-runtime:prodbce6d452ad08
aws-sdk@2.1692.0
no fix listed
1
registry.gitlab.com/timvisee/send:v3.4.2047986cf6ef69
aws-sdk@2.1120.0
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.