Fix cli vulnerabilities found by coverity

[pnv1]

Changelog category

• Not for changelog (changelog entry is not required)

[github-actions]

🟢 2025-02-24 09:00:30 UTC The validation of the Pull Request description is successful.

[github-actions]

⚪ 2025-02-24 09:03:13 UTC Pre-commit check linux-x86_64-release-asan for 6ec8347 has started.
⚪ 2025-02-24 09:03:26 UTC Artifacts will be uploaded here
⚪ 2025-02-24 09:05:47 UTC ya make is running...
🟢 2025-02-24 09:18:30 UTC Tests successful.

Test history | Ya make output | Test bloat

TESTS	PASSED	ERRORS	FAILED	SKIPPED	MUTED?
719	703	0	0	10	6

🟢 2025-02-24 09:18:39 UTC Build successful.
🟢 2025-02-24 09:18:52 UTC ydbd size 3.6 GiB changed* by +1.6 KiB, which is < 100.0 KiB vs main: OK

ydbd size dash	main: 50d5375	merge: 6ec8347	diff	diff %
ydbd size	3 899 470 864 Bytes	3 899 472 520 Bytes	+1.6 KiB	+0.000%
ydbd stripped size	1 365 153 040 Bytes	1 365 153 680 Bytes	+640 Bytes	+0.000%

^{*please be aware that the difference is based on comparing your commit and the last completed build from the post-commit, check comparation}

[github-actions]

⚪ 2025-02-24 09:03:16 UTC Pre-commit check linux-x86_64-relwithdebinfo for 6ec8347 has started.
⚪ 2025-02-24 09:03:29 UTC Artifacts will be uploaded here
⚪ 2025-02-24 09:05:59 UTC ya make is running...
🟢 2025-02-24 09:24:39 UTC Tests successful.

Test history | Ya make output | Test bloat

TESTS	PASSED	ERRORS	FAILED	SKIPPED	MUTED?
1135	1117	0	0	11	7

🟢 2025-02-24 09:24:51 UTC Build successful.
🟢 2025-02-24 09:25:01 UTC ydbd size 2.1 GiB changed* by 0 Bytes, which is <= 0 Bytes vs main: OK

ydbd size dash	main: 388cf79	merge: 6ec8347	diff	diff %
ydbd size	2 242 824 384 Bytes	2 242 824 384 Bytes	0 Bytes	0.000%
ydbd stripped size	474 854 904 Bytes	474 854 904 Bytes	0 Bytes	0.000%

^{*please be aware that the difference is based on comparing your commit and the last completed build from the post-commit, check comparation}