StackRadarChart IndexLive demo

CVE-2025-45768

High

Advisory

Published 31 Jul 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.0; base score, highest
EPSS: 0.002; 6th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 238; of 17,781 indexed, latest versions
Container images: 231; deployed by those charts
Fix available: None; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 238 of 17,781 indexed charts deploy, on 231 images.

Affected package	Affected versions	Fixed in	Images
pyjwtpypi	1.4.2, 1.5.3, 1.6.1, 1.6.4+13 more	no fix listed	231
pyjwtdeb	2.6.0-1, 2.6.0-1+deb12u1	no fix listed	9

OSV records: DEBIAN-CVE-2025-45768 PYSEC-2025-183

Charts affected

238 by stars

Chart

Latest

Affected images

Radar Score

rada-platformrada-platform

1 of 7 See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
apache/airflow :2.10.2-python3.9	ce90bdc3d2af	pyjwt@2.9.0	no fix listed

Open the chart page →

21,211

request-registryrequest-registry

1 of 2 See more

request-registry request-registry 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
registry.gitlab.com/open-forms/request-registry :latest	0886cbbc5f95	pyjwt@1.7.1	no fix listed

Open the chart page →

2,201

imgtagrotational

1 of 1 See more

imgtag rotational 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
gcr.io/rotationalio-habanero/imgtag :89ec287	a534a3170d03	pyjwt@2.10.1	no fix listed

Open the chart page →

3,312

checkmkrtomik-helm-charts

1 of 1 See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
checkmk/check-mk-community :2.5.0p6	c11b422210c4	pyjwt@2.10.1	no fix listed

Open the chart page →

7,436

paperless-ngxrtomik-helm-charts

1 of 1 See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	pyjwt@2.10.1	no fix listed

Open the chart page →

10,605

tandoorrtomik-helm-charts

1 of 1 See more

tandoor rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
vabene1111/recipes :2.3.5	0f8d061895e9	pyjwt@2.10.1	no fix listed

Open the chart page →

4,499

uptime-kumarubxkube

1 of 1 See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.4.0	91e963bfda56	pyjwt@2.6.0-1+deb12u1 pyjwt@2.6.0	no fix listed no fix listed

Open the chart page →

30,219

vrisingryuunosukeds3

1 of 1 See more

vrising ryuunosukeds3 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
trueosiris/vrising :latest	9356f98ad561	pyjwt@2.3.0	no fix listed

Open the chart page →

7,295

uptime-kumasarab97

1 of 1 See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.22.1	0b55bcb83a1c	pyjwt@1.7.0	no fix listed

Open the chart page →

4,744

airflowsb-helm-charts

1 of 1 See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
apache/airflow :2.8.1	e5560ad0b86e	pyjwt@2.8.0	no fix listed

Open the chart page →

10,209

pgadminsb-helm-charts

1 of 1 See more

pgadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
dpage/pgadmin4 :8.13	561c1f8f99f2	pyjwt@2.9.0	no fix listed

Open the chart page →

1,713

syncstorageschichtel

1 of 1 See more

syncstorage schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
mozilla/syncstorage-rs :0.15.8	93752877dced	pyjwt@2.8.0	no fix listed

Open the chart page →

1,318

weblateslamdev

1 of 2 See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
weblate/weblate :3.11.3-1	82848df56ecd	pyjwt@1.7.1	no fix listed

Open the chart page →

8,694

aafsmo-helm-chart

1 of 14 See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	pyjwt@1.7.1	no fix listed

Open the chart page →

25,769

aaismo-helm-chart

1 of 14 See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	pyjwt@1.7.1	no fix listed

Open the chart page →

25,803

dmaap-listenersmo-helm-chart

1 of 3 See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	pyjwt@1.7.1	no fix listed

Open the chart page →

25,769

elasticsearchsmo-helm-chart

1 of 5 See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	pyjwt@1.7.1	no fix listed

Open the chart page →

24,776

mariadb-initsmo-helm-chart

1 of 2 See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	pyjwt@1.7.1	no fix listed

Open the chart page →

24,776

sdcsmo-helm-chart

1 of 14 See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	pyjwt@1.7.1	no fix listed

Open the chart page →

25,769

sdnc-ansible-serversmo-helm-chart

1 of 3 See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	pyjwt@1.7.1	no fix listed

Open the chart page →

25,769

sdnc-portalsmo-helm-chart

1 of 3 See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	pyjwt@1.7.1	no fix listed

Open the chart page →

25,769

sdnc-promsmo-helm-chart

1 of 2 See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	pyjwt@1.7.1	no fix listed

Open the chart page →

24,776

sdnc-websmo-helm-chart

1 of 3 See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	pyjwt@1.7.1	no fix listed

Open the chart page →

24,776

ueb-listenersmo-helm-chart

1 of 3 See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	pyjwt@1.7.1	no fix listed

Open the chart page →

25,769

smtpsmtp

1 of 1 See more

smtp smtp 1.3.3

1 of the 1 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
registry.gitlab.com/xrow-public/helm-smtp/postfix :1.3.3	7eea4f0883dd	pyjwt@2.10.1	no fix listed

Open the chart page →

1,437

artifactory-cleanupsubshell

1 of 1 See more

artifactory-cleanup subshell 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
devopshq/artifactory-cleanup :1.0.18	30e093bffa91	pyjwt@2.10.1	no fix listed

Open the chart page →

2,534

substra-backendsubstra

1 of 7 See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
ghcr.io/substra/substra-backend :1.0.1	21967f54ec86	pyjwt@2.9.0	no fix listed

Open the chart page →

4,731

the0the0

1 of 9 See more

the0 the0 0.9.8

1 of the 9 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
ghcr.io/alexanderwanyoike/the0/runtime :1.14.7	459010a02aff	pyjwt@2.7.0	no fix listed

Open the chart page →

7,248

jupyterhubuninettsigma2

1 of 5 See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
quay.io/nird-toolkit/jupyterhub-server :20221215-e6aa80e	cae8c0622533	pyjwt@2.4.0	no fix listed

Open the chart page →

8,607

opencloudunxwares

1 of 13 See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
apache/tika :2.9.2.1-full	ae0b86d3c4d0	pyjwt@2.7.0	no fix listed

Open the chart page →

45,239

simple-prima-notavcnngr

1 of 4 See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
dpage/pgadmin4 :9.2	52cb72a9e3da	pyjwt@2.10.1	no fix listed

Open the chart page →

4,768

browserlessvictorlane

1 of 1 See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
ghcr.io/browserless/chromium :v2.43.0	853e6f105b51	pyjwt@2.7.0	no fix listed

Open the chart page →

4,305

twenty-crmvictorlane

1 of 3 See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	pyjwt@2.3.0	no fix listed

Open the chart page →

13,459

wazuhwazuh-helm-eks

1 of 6 See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.14.4	5a065930682d	pyjwt@2.10.1	no fix listed

Open the chart page →

5,484

supersetwbstack

1 of 1 See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
apache/superset :4.0.1	ab9467fd712c	pyjwt@2.4.0	no fix listed

Open the chart page →

7,085

juicefs-csi-driverwenerme

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	pyjwt@2.6.0-1+deb12u1 pyjwt@2.6.0	no fix listed no fix listed

Open the chart page →

9,117

ceph-csi-cephfswikimedia

1 of 5 See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	pyjwt@1.6.1	no fix listed

Open the chart page →

10,285

ceph-csi-rbdwikimedia

1 of 6 See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2025-45768.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	pyjwt@1.6.1	no fix listed

Open the chart page →

11,784

Container images carrying it

231 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/mlops-for-all/mlflow-tracking-server :3.8-1.30.1-v1.0.0	d30e631684c3	pyjwt@2.7.0	no fix listed	1
ghcr.io/opencost/opencost-parquet-exporter :v0.2.1	ce85ef0ce665	pyjwt@2.10.1	no fix listed	1
ghcr.io/openrelik/openrelik-worker-bulkextractor :latest	67498ee2e639	pyjwt@2.7.0	no fix listed	1
ghcr.io/openrelik/openrelik-worker-extraction :latest	ec9fc5864cd5	pyjwt@2.7.0	no fix listed	1
ghcr.io/openrelik/openrelik-worker-plaso :latest	75537ea8c851	pyjwt@2.7.0	no fix listed	1
ghcr.io/openrelik/openrelik-worker-timesketch :latest	4cb88b603cdc	pyjwt@2.7.0	no fix listed	1
ghcr.io/open-telemetry/demo :1.12.0-loadgenerator	85c9935ff31b	pyjwt@2.9.0	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	pyjwt@2.9.0	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	pyjwt@2.10.1	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	pyjwt@2.10.1	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	pyjwt@2.10.1	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	pyjwt@2.10.1	no fix listed	1
ghcr.io/porelli/firefox-sync :syncstorage-rs-mysql-0.18.2	7d244e514216	pyjwt@2.10.1	no fix listed	1
ghcr.io/sissbruecker/linkding :1.45.0	61b2eb9eed8e	pyjwt@2.10.1	no fix listed	1
ghcr.io/substra/substra-backend :1.0.1	21967f54ec86	pyjwt@2.9.0	no fix listed	1
ghcr.io/tandoorrecipes/recipes :1.5.31	063eb446e298	pyjwt@2.10.1	no fix listed	1
ghcr.io/tauffer-consulting/domino-rest :latest	8bf880fe8c73	pyjwt@2.4.0	no fix listed	1
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	pyjwt@2.8.0	no fix listed	1
public.ecr.aws/datadog/agent :7.73.0	f4925b15ce94	pyjwt@2.10.1	no fix listed	1
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	pyjwt@2.9.0	no fix listed	1
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	pyjwt@2.4.0	no fix listed	1
quay.io/hewlettpackardenterprise/squest :2.8.4	65694109877e	pyjwt@2.10.1	no fix listed	1
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	pyjwt@2.3.0	no fix listed	1
quay.io/jupyterhub/k8s-hub :3.2.1	2528c6e57587	pyjwt@2.8.0	no fix listed	1
quay.io/nird-toolkit/jupyterhub-server :20221215-e6aa80e	cae8c0622533	pyjwt@2.4.0	no fix listed	1
quay.io/ortelius/ms-validate-user :main-v10.0.1694-g98ed94	b5054bd4e97a	pyjwt@2.10.1	no fix listed	1
quay.io/stackgres/operator :1.19.1	f241b0b20326	pyjwt@2.9.0	no fix listed	1
registry.gitlab.com/crafty-controller/crafty-4 :latest	166a06f73d8c	pyjwt@2.8.0	no fix listed	1
registry.gitlab.com/open-forms/forms-catalogue :latest	4eaf9c911f33	pyjwt@1.7.1	no fix listed	1
registry.gitlab.com/open-forms/request-registry :latest	0886cbbc5f95	pyjwt@1.7.1	no fix listed	1
registry.gitlab.com/xrow-public/helm-smtp/postfix :1.3.3	7eea4f0883dd	pyjwt@2.10.1	no fix listed	1