StackRadar

CVE-2022-29217

High

Advisory

Published 24 May 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.014
70th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
81
of 17,781 indexed, latest versions
Container images
68
deployed by those charts
Fix available
2 of 2
affected packages

Key confusion through non-blocklisted public key formats

Carried by container images the latest versions of 81 of 17,781 indexed charts deploy, on 68 images.

Affected packageAffected versionsFixed inImages
pyjwtdeb2.3.0-12.3.0-1ubuntu0.11
pyjwtpypi1.5.3, 1.6.1, 1.6.4, 1.7.0+5 more2.4.068
OSV records
GHSA-ffqj-6fqr-9h24UBUNTU-CVE-2022-29217
Also known as
PYSEC-2022-202, USN-5526-1, USN-5526-2

Charts affected

81 by stars
ChartLatestAffected imagesRadar Score
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
pyjwt@2.3.0
2.4.0

Open the chart page →

7,705
supersetcloudposse1.2.01 of 1See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
pyjwt@1.7.1
2.4.0

Open the chart page →

5,851
uptime-kumaduyet0.1.71 of 1See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
pyjwt@1.7.0
2.4.0

Open the chart page →

4,515
fadicetic0.3.13 of 25See more

fadi cetic 0.3.1

3 of the 25 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
pyjwt@1.7.1
2.4.0
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
pyjwt@1.7.1
2.4.0
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
pyjwt@1.7.1
2.4.0

Open the chart page →

52,919
taigarc-helm-charts0.1.01 of 7See more

taiga rc-helm-charts 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
taigaio/taiga-back:6.4.29f97323cc150
pyjwt@2.1.0
2.4.0

Open the chart page →

7,255
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
flagsmith/flagsmith-api:v2.6.0fd58556339a4
pyjwt@1.7.1
2.4.0

Open the chart page →

6,868
kobotoolboxone-acre-fundVerified publisher0.7.41 of 9See more

kobotoolbox one-acre-fund 0.7.4

1 of the 9 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
kobotoolbox/kpi:2.022.24dbcacc01bccd4
pyjwt@2.3.0
2.4.0

Open the chart page →

18,517
open-zaakopen-zaak0.8.01 of 3See more

open-zaak open-zaak 0.8.0

1 of the 3 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
openzaak/open-zaak:1.6.02ca2ea6e0ae9
pyjwt@2.3.0
2.4.0

Open the chart page →

4,045
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
pyjwt@2.0.1
2.4.0

Open the chart page →

12,046
datadogdatadog-test2.4.231 of 2See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
datadog/agent:7.22.08f20e56b5311
pyjwt@1.7.1
2.4.0

Open the chart page →

4,568
weblatedeliveryheroVerified publisher0.3.21 of 3See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
pyjwt@1.7.1
2.4.0

Open the chart page →

7,984
games-on-whalesgeek-cookbookVerified publisher1.8.21 of 7See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/xorg:1.0.0305b3327ebba
pyjwt@1.7.1
2.4.0

Open the chart page →

35,305
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
pyjwt@2.3.0
2.4.0

Open the chart page →

7,801
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
pyjwt@1.7.0
2.4.0

Open the chart page →

5,079
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
pyjwt@1.7.0
2.4.0

Open the chart page →

4,196
supersetinseefrlab1.4.01 of 4See more

superset inseefrlab 1.4.0

1 of the 4 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
pyjwt@2.2.0
2.4.0

Open the chart page →

7,129
helm-taigamvitale1989-helm-taigaVerified publisher0.2.51 of 2See more

helm-taiga mvitale1989-helm-taiga 0.2.5

1 of the 2 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
pyjwt@1.7.1
2.4.0

Open the chart page →

5,104
open-notificatiesopen-zaak0.7.01 of 4See more

open-notificaties open-zaak 0.7.0

1 of the 4 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
openzaak/open-notificaties:1.3.02e65313b9b10
pyjwt@2.3.0
2.4.0

Open the chart page →

2,850
routehub-client-hubroutehub-helm1.0.01 of 3See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg16d7db8f1085a3
pyjwt@2.3.0
2.4.0

Open the chart page →

12,930
alertasomeblackmagic0.2.31 of 2See more

alerta someblackmagic 0.2.3

1 of the 2 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
alerta/alerta-web:8.5.04786b9eaa606
pyjwt@2.1.0
2.4.0

Open the chart page →

3,162
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
statcan/ckan:2.93921305425b8
pyjwt@1.7.1
2.4.0

Open the chart page →

24,930
synapsesudermanjr1.1.51 of 1See more

synapse sudermanjr 1.1.5

1 of the 1 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
pyjwt@2.3.0
2.4.0

Open the chart page →

3,332
radosgwananace-chartsVerified publisher0.3.41 of 1See more

radosgw ananace-charts 0.3.4

1 of the 1 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
ceph/daemon:latest-nautilus90f30824a96e
pyjwt@1.5.3
2.4.0

Open the chart page →

1,650
games-on-whalesangelnu2.0.01 of 7See more

games-on-whales angelnu 2.0.0

1 of the 7 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/xorg:1.0.0305b3327ebba
pyjwt@1.7.1
2.4.0

Open the chart page →

42,126
keystonearzu0.2.291 of 4See more

keystone arzu 0.2.29

1 of the 4 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
pyjwt@2.0.1
2.4.0

Open the chart page →

22,568
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
pyjwt@2.3.0
2.4.0

Open the chart page →

32,501
shynetatrox0.1.11 of 1See more

shynet atrox 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.12.0e821e31140f7
pyjwt@2.3.0
2.4.0

Open the chart page →

5,507
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
pyjwt@1.7.1
2.4.0

Open the chart page →

22,891
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
pyjwt@1.7.1
2.4.0

Open the chart page →

2,504
prometheus-operatorcamptocamp35.15.11 of 5See more

prometheus-operator camptocamp3 5.15.1

1 of the 5 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
pyjwt@1.7.1
2.4.0

Open the chart page →

2,490
syncserverchristianhuthVerified publisher1.3.01 of 1See more

syncserver christianhuth 1.3.0

1 of the 1 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
mozilla/syncserver:latest016162bf39d8
pyjwt@1.7.1
2.4.0

Open the chart page →

1,382
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
pyjwt@2.3.0
2.4.0

Open the chart page →

20,900
check-mkcloudnativeapp0.2.11 of 1See more

check-mk cloudnativeapp 0.2.1

1 of the 1 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
nlmacamp/check_mk:latest5dbb8589f824
pyjwt@1.6.4
2.4.0

Open the chart page →

2,408
prometheus-operatorcloudnativeapp6.4.01 of 7See more

prometheus-operator cloudnativeapp 6.4.0

1 of the 7 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.186eb52513d59e
pyjwt@1.7.1
2.4.0

Open the chart page →

2,954
sentry-kubernetescloudnativeapp0.2.01 of 1See more

sentry-kubernetes cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
getsentry/sentry-kubernetes:latest6ac37974fd2a
pyjwt@1.7.1
2.4.0

Open the chart page →

1,415
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
pyjwt@1.7.1
2.4.0

Open the chart page →

5,060
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
pyjwt@2.3.0
2.4.0

Open the chart page →

6,695
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
pyjwt@2.3.0
2.4.0

Open the chart page →

12,457
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
pyjwt@2.3.0
2.4.0

Open the chart page →

12,131
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
pyjwt@2.3.0
2.4.0

Open the chart page →

11,592
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
pyjwt@1.7.1
2.4.0

Open the chart page →

4,422
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
pyjwt@1.7.0
2.4.0

Open the chart page →

4,217
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
pyjwt@2.3.0
2.4.0

Open the chart page →

24,917
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
pyjwt@2.3.0-1
pyjwt@2.3.0
2.3.0-1ubuntu0.1
2.4.0

Open the chart page →

30,699
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
pyjwt@1.7.1
2.4.0

Open the chart page →

11,174
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
pyjwt@2.1.0
2.4.0

Open the chart page →

25,122
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
pyjwt@1.7.1
2.4.0

Open the chart page →

14,673
kodiakfikaworks1.1.41 of 2See more

kodiak fikaworks 1.1.4

1 of the 2 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
cdignam/kodiak:v0.54.05a6a55b39cee
pyjwt@1.7.1
2.4.0

Open the chart page →

3,892
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
pyjwt@1.7.1
2.4.0

Open the chart page →

64,489
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-29217.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
pyjwt@1.7.0
2.4.0

Open the chart page →

3,474

Container images carrying it

68 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.4.0
11
cloudve/cloudlaunch-server:latest4a3d7fae90bb
pyjwt@2.3.0
2.4.0
3
amancevice/superset:0.35.212a0a9e66550
pyjwt@1.7.1
2.4.0
2
larribas/mlflow:1.9.105ccb0b46bfb
pyjwt@1.7.1
2.4.0
2
weblate/weblate:4.2.2-169c160d37a3c
pyjwt@1.7.1
2.4.0
2
ghcr.io/games-on-whales/xorg:1.0.0305b3327ebba
pyjwt@1.7.1
2.4.0
2
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
pyjwt@1.6.1
2.4.0
2
alerta/alerta-web:8.5.04786b9eaa606
pyjwt@2.1.0
2.4.0
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
pyjwt@2.0.1
2.4.0
1
amancevice/superset:0.28.1c8c04bfe3d66
pyjwt@1.7.1
2.4.0
1
amundsendev/amundsen-frontend:2.1.169e7915e61c1
pyjwt@1.7.1
2.4.0
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
pyjwt@2.2.0
2.4.0
1
cdignam/kodiak:v0.54.05a6a55b39cee
pyjwt@1.7.1
2.4.0
1
ceph/daemon:latest-nautilus90f30824a96e
pyjwt@1.5.3
2.4.0
1
datadog/agent:7.22.08f20e56b5311
pyjwt@1.7.1
2.4.0
1
datadog/agent:6aad9994de6a7
pyjwt@1.7.1
2.4.0
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
pyjwt@1.7.1
2.4.0
1
flagsmith/flagsmith-api:v2.6.0fd58556339a4
pyjwt@1.7.1
2.4.0
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
pyjwt@1.7.1
2.4.0
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
pyjwt@1.7.1
2.4.0
1
gethue/hue:4.10.05702b2c37ff9
pyjwt@1.7.1
2.4.0
1
getsentry/sentry-kubernetes:latest6ac37974fd2a
pyjwt@1.7.1
2.4.0
1
improwised/erpnext-worker:v13.4.197280b55cbd4
pyjwt@1.7.1
2.4.0
1
jertel/elastalert2:2.2.34dcc0ef93efc
pyjwt@1.7.1
2.4.0
1
jmferrer/azure-devops-agent:latest030f68ec6998
pyjwt@1.7.1
2.4.0
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
pyjwt@1.7.1
2.4.0
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
pyjwt@1.7.1
2.4.0
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
pyjwt@1.7.1
2.4.0
1
kiwigrid/k8s-sidecar:0.0.186eb52513d59e
pyjwt@1.7.1
2.4.0
1
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
pyjwt@1.7.1
2.4.0
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
pyjwt@2.3.0
2.4.0
1
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
pyjwt@1.7.1
2.4.0
1
louislam/uptime-kuma:1.22.10b55bcb83a1c
pyjwt@1.7.0
2.4.0
1
louislam/uptime-kuma:13d632903e6af
pyjwt@1.7.0
2.4.0
1
louislam/uptime-kuma:1.23.1396510915e6be
pyjwt@1.7.0
2.4.0
1
louislam/uptime-kuma:1.17.1a4eab252e5a2
pyjwt@1.7.0
2.4.0
1
louislam/uptime-kuma:1.18.5a84767d7934f
pyjwt@1.7.0
2.4.0
1
louislam/uptime-kuma:1.23.12bc6f244ecf27
pyjwt@1.7.0
2.4.0
1
lsstsqre/prepuller:latest19c2dfc4e4ff
pyjwt@2.1.0
2.4.0
1
lsstsqre/sciplat-hub:latest5e0ade6bed1c
pyjwt@2.0.1
2.4.0
1
lsstsqre/wfdispatcher:lateste9feb99f524d
pyjwt@2.0.1
2.4.0
1
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
pyjwt@2.3.0
2.4.0
1
milesmcc/shynet:v0.12.0e821e31140f7
pyjwt@2.3.0
2.4.0
1
mozilla/syncserver:latest016162bf39d8
pyjwt@1.7.1
2.4.0
1
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
pyjwt@1.7.1
2.4.0
1
nlmacamp/check_mk:latest5dbb8589f824
pyjwt@1.6.4
2.4.0
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
pyjwt@2.0.1
2.4.0
1
openzaak/open-notificaties:1.3.02e65313b9b10
pyjwt@2.3.0
2.4.0
1
openzaak/open-zaak:1.6.02ca2ea6e0ae9
pyjwt@2.3.0
2.4.0
1
redash/redash:10.0.0.b503639392753c0376
pyjwt@1.7.1
2.4.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.