StackRadar

GHSA-pjjw-qhg8-p2p9

Medium

Advisory

Published 27 Nov 2023In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
44
of 17,781 indexed, latest versions
Container images
43
deployed by those charts
Fix available
1 of 1
affected package

aiohttp has vulnerable dependency that is vulnerable to request smuggling

Carried by container images the latest versions of 44 of 17,781 indexed charts deploy, on 43 images.

Affected packageAffected versionsFixed inImages
aiohttppypi3.4.4, 3.5.4, 3.6.2, 3.7.1+8 more3.8.643
OSV records
GHSA-pjjw-qhg8-p2p9

Charts affected

44 by stars
ChartLatestAffected imagesRadar Score
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
aiohttp@3.8.1
3.8.6

Open the chart page →

7,705
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
aiohttp@3.8.4
3.8.6

Open the chart page →

12,170
clustersecretpatrungel0.2.01 of 1See more

clustersecret patrungel 0.2.0

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
flag5/clustersecret:0.0.94ad5748bfcc6
aiohttp@3.8.1
3.8.6

Open the chart page →

1,841
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
aiohttp@3.7.4
3.8.6

Open the chart page →

10,730
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
aiohttp@3.8.5
3.8.6

Open the chart page →

11,205
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
aiohttp@3.8.3
3.8.6

Open the chart page →

5,598
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
aiohttp@3.8.3
3.8.6

Open the chart page →

8,823
archerydoubanVerified publisher0.4.31 of 6See more

archery douban 0.4.3

1 of the 6 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
hhyo/archery:v1.9.11aa41843419e
aiohttp@3.8.3
3.8.6

Open the chart page →

5,853
genesis-generatorethereum-helm-chartsVerified publisher0.2.31 of 2See more

genesis-generator ethereum-helm-charts 0.2.3

1 of the 2 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
skylenet/ethereum-genesis-generator:latest210353ce7c89
aiohttp@3.8.3
3.8.6

Open the chart page →

3,135
appdaemongeek-cookbookVerified publisher8.4.21 of 1See more

appdaemon geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
acockburn/appdaemon:4.0.83a93281d7e94
aiohttp@3.7.4
3.8.6

Open the chart page →

3,461
supersetinseefrlab1.4.01 of 4See more

superset inseefrlab 1.4.0

1 of the 4 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
aiohttp@3.7.4
3.8.6

Open the chart page →

7,129
opta-agentopta-agentVerified publisher0.1.31 of 1See more

opta-agent opta-agent 0.1.3

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
runx1/opta-agent:latest0ca3867d3200
aiohttp@3.8.1
3.8.6

Open the chart page →

1,543
smarter-demosmarterOfficialVerified publisher0.1.52 of 7See more

smarter-demo smarter 0.1.5

2 of the 7 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
aiohttp@3.8.3
3.8.6
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
aiohttp@3.8.3
3.8.6

Open the chart page →

45,832
alertasomeblackmagic0.2.31 of 2See more

alerta someblackmagic 0.2.3

1 of the 2 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
alerta/alerta-web:8.5.04786b9eaa606
aiohttp@3.8.0
3.8.6

Open the chart page →

3,162
shynetatrox0.1.11 of 1See more

shynet atrox 0.1.1

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.12.0e821e31140f7
aiohttp@3.8.1
3.8.6

Open the chart page →

5,507
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
aiohttp@3.8.1
3.8.6

Open the chart page →

16,069
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.4.121994f40e0da
aiohttp@3.8.1
3.8.6

Open the chart page →

13,852
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
aiohttp@3.8.5
3.8.6

Open the chart page →

6,179
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
aiohttp@3.6.2
3.8.6

Open the chart page →

27,728
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
aiohttp@3.6.2
3.8.6

Open the chart page →

24,335
kube-web-viewdecayofmind0.0.41 of 1See more

kube-web-view decayofmind 0.0.4

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
aiohttp@3.6.2
3.8.6

Open the chart page →

2,264
argocd-version-exporterevilmartians0.0.11 of 1See more

argocd-version-exporter evilmartians 0.0.1

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
quay.io/evl.ms/argocd-exporter:0.0.136ea8f34aa6b
aiohttp@3.7.4.post0
3.8.6

Open the chart page →

2,401
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
aiohttp@3.8.3
3.8.6

Open the chart page →

4,085
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
stratospire/activityrelay:0.2.3a4c34cb01117
aiohttp@3.8.3
3.8.6

Open the chart page →

13,450
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
aiohttp@3.8.4
3.8.6

Open the chart page →

12,170
resurrectbothalkeye0.1.51 of 1See more

resurrectbot halkeye 0.1.5

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
halkeye/slack-resurrect:v0.1.477b05e95fdb5
aiohttp@3.5.4
3.8.6

Open the chart page →

3,809
shynetjuniorjpdj0.1.301 of 1See more

shynet juniorjpdj 0.1.30

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.13.1ba54f7797a6b
aiohttp@3.8.1
3.8.6

Open the chart page →

2,581
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
aiohttp@3.8.5
3.8.6

Open the chart page →

6,447
jupyterhubkubeblocksVerified publisher0.1.01 of 7See more

jupyterhub kubeblocks 0.1.0

1 of the 7 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
aiohttp@3.8.5
3.8.6

Open the chart page →

7,356
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
aiohttp@3.4.4
3.8.6

Open the chart page →

18,316
legendlegend0.1.21 of 1See more

legend legend 0.1.2

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
ghcr.io/grofers/legend:0.1d6e901ad0ebd
aiohttp@3.7.1
3.8.6

Open the chart page →

4,067
kafka-aggregatorlsst-sqre0.1.21 of 1See more

kafka-aggregator lsst-sqre 0.1.2

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
lsstsqre/kafkaaggregator:masterbe1b21060854
aiohttp@3.7.4
3.8.6

Open the chart page →

3,052
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
aiohttp@3.8.1
3.8.6

Open the chart page →

17,779
buildkite-exporterminaVerified publisher0.1.41 of 1See more

buildkite-exporter mina 0.1.4

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
codaprotocol/buildkite-exporter:0.2.137c68e67a401
aiohttp@3.7.3
3.8.6

Open the chart page →

2,599
mlflowncsaVerified publisher1.2.11 of 4See more

mlflow ncsa 1.2.1

1 of the 4 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
evk02/mlflow:2.2.1ef6ff257ef35
aiohttp@3.8.4
3.8.6

Open the chart page →

5,456
object-clonerobject-clonerVerified publisher2.0.01 of 1See more

object-cloner object-cloner 2.0.0

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
ghcr.io/ideamixes/object-cloner:2.0.031030fd2f192
aiohttp@3.8.5
3.8.6

Open the chart page →

1,588
email-managerphntom0.1.221 of 2See more

email-manager phntom 0.1.22

1 of the 2 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
phntom/email-manager:0.1.22d8e2a9f2f085
aiohttp@3.8.4
3.8.6

Open the chart page →

2,565
radar-kafkaradar-baseVerified publisher0.4.11 of 2See more

radar-kafka radar-base 0.4.1

1 of the 2 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
ghcr.io/lsst-sqre/strimzi-registry-operator:0.6.07e25f7048aff
aiohttp@3.8.1
3.8.6

Open the chart page →

4,219
kube-web-viewrlex0.5.01 of 1See more

kube-web-view rlex 0.5.0

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:23.8.0431f1bf013d0
aiohttp@3.8.4
3.8.6

Open the chart page →

4,908
ansible-semaphoresergiotocaliniVerified publisher1.2.01 of 1See more

ansible-semaphore sergiotocalini 1.2.0

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.9.645b50bc11833f
aiohttp@3.8.5
3.8.6

Open the chart page →

3,337
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
aiohttp@3.8.1
3.8.6

Open the chart page →

8,607
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
aiohttp@3.7.4
3.8.6

Open the chart page →

11,119
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
aiohttp@3.8.1
3.8.6

Open the chart page →

3,118
grafana-matrix-forwarderzloi-space1.0.01 of 2See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry GHSA-pjjw-qhg8-p2p9.

Container imageDigestPackageFixed in
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
aiohttp@3.8.1
3.8.6

Open the chart page →

1,636

Container images carrying it

43 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
aiohttp@3.8.1
3.8.6
2
vdiogov/glpi-conteiner:latest6945f84f0058
aiohttp@3.8.4
3.8.6
2
acockburn/appdaemon:4.0.83a93281d7e94
aiohttp@3.7.4
3.8.6
1
alerta/alerta-web:8.5.04786b9eaa606
aiohttp@3.8.0
3.8.6
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
aiohttp@3.7.4
3.8.6
1
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
aiohttp@3.7.4
3.8.6
1
codaprotocol/buildkite-exporter:0.2.137c68e67a401
aiohttp@3.7.3
3.8.6
1
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
aiohttp@3.4.4
3.8.6
1
devopstales/trivy-operator:2.575136aa7a26e
aiohttp@3.8.3
3.8.6
1
evk02/mlflow:2.2.1ef6ff257ef35
aiohttp@3.8.4
3.8.6
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
aiohttp@3.8.3
3.8.6
1
flag5/clustersecret:0.0.94ad5748bfcc6
aiohttp@3.8.1
3.8.6
1
galaxy/cloudman-server:lateste5c265fe9fcd
aiohttp@3.8.1
3.8.6
1
halkeye/slack-resurrect:v0.1.477b05e95fdb5
aiohttp@3.5.4
3.8.6
1
hhyo/archery:v1.9.11aa41843419e
aiohttp@3.8.3
3.8.6
1
hjacobs/kube-web-view:23.8.0431f1bf013d0
aiohttp@3.8.4
3.8.6
1
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
aiohttp@3.6.2
3.8.6
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
aiohttp@3.8.5
3.8.6
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
aiohttp@3.7.4
3.8.6
1
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
aiohttp@3.8.5
3.8.6
1
lsstsqre/kafkaaggregator:masterbe1b21060854
aiohttp@3.7.4
3.8.6
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
aiohttp@3.8.1
3.8.6
1
milesmcc/shynet:v0.13.1ba54f7797a6b
aiohttp@3.8.1
3.8.6
1
milesmcc/shynet:v0.12.0e821e31140f7
aiohttp@3.8.1
3.8.6
1
opendatacube/restcube:latest91870111837c
aiohttp@3.6.2
3.8.6
1
opendatacube/wms:latest1b90cdf68831
aiohttp@3.6.2
3.8.6
1
phntom/email-manager:0.1.22d8e2a9f2f085
aiohttp@3.8.4
3.8.6
1
runx1/opta-agent:latest0ca3867d3200
aiohttp@3.8.1
3.8.6
1
semaphoreui/semaphore:v2.9.645b50bc11833f
aiohttp@3.8.5
3.8.6
1
skylenet/ethereum-genesis-generator:latest210353ce7c89
aiohttp@3.8.3
3.8.6
1
stratospire/activityrelay:0.2.3a4c34cb01117
aiohttp@3.8.3
3.8.6
1
wazuh/wazuh-manager:4.4.121994f40e0da
aiohttp@3.8.1
3.8.6
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
aiohttp@3.8.5
3.8.6
1
ghcr.io/grofers/legend:0.1d6e901ad0ebd
aiohttp@3.7.1
3.8.6
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
aiohttp@3.8.1
3.8.6
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
aiohttp@3.8.5
3.8.6
1
ghcr.io/ideamixes/object-cloner:2.0.031030fd2f192
aiohttp@3.8.5
3.8.6
1
ghcr.io/lsst-sqre/strimzi-registry-operator:0.6.07e25f7048aff
aiohttp@3.8.1
3.8.6
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
aiohttp@3.8.3
3.8.6
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
aiohttp@3.8.3
3.8.6
1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
aiohttp@3.8.3
3.8.6
1
quay.io/evl.ms/argocd-exporter:0.0.136ea8f34aa6b
aiohttp@3.7.4.post0
3.8.6
1
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
aiohttp@3.8.1
3.8.6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.