StackRadarChart IndexLive demo

CVE-2025-45769

Medium

Advisory

Published 31 Jul 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.001; 3rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 33; of 17,781 indexed, latest versions
Container images: 30; deployed by those charts
Fix available: 1 of 1; affected package

php-jwt contains weak encryption

Carried by container images the latest versions of 33 of 17,781 indexed charts deploy, on 30 images.

Affected package	Affected versions	Fixed in	Images
firebase/php-jwtcomposer	v5.2.0, v5.2.1, v5.4.0, v5.5.1+10 more	7.0.0	30

OSV records: GHSA-2x45-7fc3-mxwq

Charts affected

33 by stars

Chart

Latest

Affected images

Radar Score

zabbixzabbix-community

1 of 5 See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
zabbix/zabbix-web-nginx-pgsql :ubuntu-7.0.23	7d4d58086515	firebase/php-jwt@v6.10.0	7.0.0

Open the chart page →

13,664

1 of 2 See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
snipe/snipe-it :v6.0.14	55fb7636a98c	firebase/php-jwt@v6.3.0	7.0.0

Open the chart page →

18,509

monicamonica

1 of 1 See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
ghcr.io/monicahq/monica-next :main	8be69156acbb	firebase/php-jwt@v6.11.1	7.0.0

Open the chart page →

5,634

1 of 2 See more

passbolt cnieg 1.1.17

1 of the 2 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
passbolt/passbolt :3.4.0-ce-non-root	655547e17263	firebase/php-jwt@v5.5.1	7.0.0

Open the chart page →

3,543

bookstackgabe565

1 of 1 See more

bookstack gabe565 0.20.0

1 of the 1 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/bookstack :version-v24.12.1	cc795b254b73	firebase/php-jwt@v6.10.2	7.0.0

Open the chart page →

2,811

invoiceninjainvoiceninja

1 of 5 See more

invoiceninja invoiceninja 0.10.2

1 of the 5 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
invoiceninja/invoiceninja :5.6.24	1437916dee01	firebase/php-jwt@v6.8.1	7.0.0

Open the chart page →

2,709

glpiglpi-conteiner

1 of 3 See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
vdiogov/glpi-conteiner :latest	6945f84f0058	firebase/php-jwt@v6.4.0	7.0.0

Open the chart page →

12,170

passbolt-hachristianhuth

1 of 4 See more

passbolt-ha christianhuth 6.0.1

1 of the 4 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
passbolt/passbolt :3.4.0-ce-non-root	655547e17263	firebase/php-jwt@v5.5.1	7.0.0

Open the chart page →

10,817

typo3christianhuth

1 of 2 See more

typo3 christianhuth 7.7.0

1 of the 2 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
martinhelmich/typo3 :12.4	c83a4f3fd7ae	firebase/php-jwt@v6.10.2	7.0.0

Open the chart page →

8,466

matomodigitalist-open-cloud-matomo

1 of 3 See more

matomo digitalist-open-cloud-matomo 12.0.20

1 of the 3 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
digitalist/matomo :5.12.0	bc4aeeaea769	firebase/php-jwt@v6.10.1	7.0.0

Open the chart page →

3,539

firefly-iiigeek-cookbook

1 of 1 See more

firefly-iii geek-cookbook 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
fireflyiii/core :version-5.6.14	2f4283bd0cf7	firebase/php-jwt@v5.5.1	7.0.0

Open the chart page →

2,076

monicageek-cookbook

1 of 1 See more

monica geek-cookbook 8.2.0

1 of the 1 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
library/monica :3.7.0-apache	ceb1ba4196ab	firebase/php-jwt@v5.5.1	7.0.0

Open the chart page →

2,096

owncloudkubernetes-homelab-helm-charts

1 of 3 See more

owncloud kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
owncloud/server :10.16.2	74c53d341076	firebase/php-jwt@v6.10.0	7.0.0

Open the chart page →

9,858

openldapcsic-charts

1 of 2 See more

openldap csic-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
ldapaccountmanager/lam :8.0.1	d46cf25d1dda	firebase/php-jwt@v5.5.1	7.0.0

Open the chart page →

5,293

ownclouddjjudas21

1 of 3 See more

owncloud djjudas21 0.3.23

1 of the 3 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
owncloud/server :10.16.3	b3f9efdcd7f7	firebase/php-jwt@v6.10.0	7.0.0

Open the chart page →

10,035

supportpalevilgn0me

1 of 1 See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	firebase/php-jwt@v5.2.1	7.0.0

Open the chart page →

20,933

passboltg0dscookie

1 of 2 See more

passbolt g0dscookie 0.5.2

1 of the 2 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
passbolt/passbolt :3.9.0-2-ce-non-root	ec046e112d5c	firebase/php-jwt@v6.3.2	7.0.0

Open the chart page →

7,940

monicagabe565

1 of 2 See more

monica gabe565 0.10.0

1 of the 2 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
library/monica :4.1.2-fpm-alpine	6d1b2bd0947e	firebase/php-jwt@v6.10.0	7.0.0

Open the chart page →

1,173

anonaddygeek-cookbook

1 of 1 See more

anonaddy geek-cookbook 6.0.0

1 of the 1 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
anonaddy/anonaddy :0.12.3	957a95565166	firebase/php-jwt@v6.2.0	7.0.0

Open the chart page →

4,788

openemrgeek-cookbook

1 of 1 See more

openemr geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
openemr/openemr :6.1.0	89eaa6d9a4e3	firebase/php-jwt@v5.5.1	7.0.0

Open the chart page →

8,392

xbackbonegeek-cookbook

1 of 1 See more

xbackbone geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
pe46dro/xbackbone-docker :3.3.3	09dfe3aa10f6	firebase/php-jwt@v5.2.0	7.0.0

Open the chart page →

1,655

glpiglpi-chart

1 of 3 See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
vdiogov/glpi-conteiner :latest	6945f84f0058	firebase/php-jwt@v6.4.0	7.0.0

Open the chart page →

12,170

fossologymidokura-community

1 of 2 See more

fossology midokura-community 0.2.2

1 of the 2 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
fossology/fossology :4.2.1	8bd1f22ba7bb	firebase/php-jwt@v6.3.0	7.0.0

Open the chart page →

3,294

moodlemoodle

1 of 2 See more

moodle moodle 1.0.3

1 of the 2 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
cloudtooling/moodle :5.2.3	f4f04e0fc401	firebase/php-jwt@v6.11.1	7.0.0

Open the chart page →

3,954

librenmsnimbolus

1 of 3 See more

librenms nimbolus 0.5.1

1 of the 3 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
librenms/librenms :24.11.0	0920bc9117a8	firebase/php-jwt@v6.10.1	7.0.0

Open the chart page →

2,293

openldapopenldap

1 of 2 See more

openldap openldap 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
ldapaccountmanager/lam :8.0.1	d46cf25d1dda	firebase/php-jwt@v5.5.1	7.0.0

Open the chart page →

5,293

firefly-iiiphntom

1 of 2 See more

firefly-iii phntom 0.2.10

1 of the 2 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
phntom/fireflyiii :version-5.7.5	f881ea5fbbf1	firebase/php-jwt@v6.1.2	7.0.0

Open the chart page →

1,813

1 of 6 See more

shopware robjuz 2.0.0

1 of the 6 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
shyim/shopware :6.4.6.0	a951c0e6b836	firebase/php-jwt@v5.4.0	7.0.0

Open the chart page →

2,972

snipeitschmitzis

1 of 2 See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
snipe/snipe-it :v8.3.1	141ebf2386fe	firebase/php-jwt@v6.11.1	7.0.0

Open the chart page →

6,094

owncloudth-charts

1 of 1 See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
owncloud/server :10.15.0	51d9b74fc2a8	firebase/php-jwt@v6.10.0	7.0.0

Open the chart page →

10,006

apiwbstack

1 of 1 See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	firebase/php-jwt@v5.5.1	7.0.0

Open the chart page →

2,019

mediawikiwbstack

1 of 1 See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	firebase/php-jwt@v5.2.0	7.0.0

Open the chart page →

2,132

xboardxboard

1 of 1 See more

xboard xboard 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-45769.

Container image	Digest	Package	Fixed in
ghcr.io/cedar2025/xboard :latest	896e4926e0d7	firebase/php-jwt@v6.11.1	7.0.0

Open the chart page →

1,042

Container images carrying it

30 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ldapaccountmanager/lam :8.0.1	d46cf25d1dda	firebase/php-jwt@v5.5.1	7.0.0	2
passbolt/passbolt :3.4.0-ce-non-root	655547e17263	firebase/php-jwt@v5.5.1	7.0.0	2
vdiogov/glpi-conteiner :latest	6945f84f0058	firebase/php-jwt@v6.4.0	7.0.0	2
anonaddy/anonaddy :0.12.3	957a95565166	firebase/php-jwt@v6.2.0	7.0.0	1
cloudtooling/moodle :5.2.3	f4f04e0fc401	firebase/php-jwt@v6.11.1	7.0.0	1
digitalist/matomo :5.12.0	bc4aeeaea769	firebase/php-jwt@v6.10.1	7.0.0	1
fireflyiii/core :version-5.6.14	2f4283bd0cf7	firebase/php-jwt@v5.5.1	7.0.0	1
fossology/fossology :4.2.1	8bd1f22ba7bb	firebase/php-jwt@v6.3.0	7.0.0	1
invoiceninja/invoiceninja :5.6.24	1437916dee01	firebase/php-jwt@v6.8.1	7.0.0	1
library/monica :4.1.2-fpm-alpine	6d1b2bd0947e	firebase/php-jwt@v6.10.0	7.0.0	1
library/monica :3.7.0-apache	ceb1ba4196ab	firebase/php-jwt@v5.5.1	7.0.0	1
librenms/librenms :24.11.0	0920bc9117a8	firebase/php-jwt@v6.10.1	7.0.0	1
martinhelmich/typo3 :12.4	c83a4f3fd7ae	firebase/php-jwt@v6.10.2	7.0.0	1
openemr/openemr :6.1.0	89eaa6d9a4e3	firebase/php-jwt@v5.5.1	7.0.0	1
owncloud/server :10.15.0	51d9b74fc2a8	firebase/php-jwt@v6.10.0	7.0.0	1
owncloud/server :10.16.2	74c53d341076	firebase/php-jwt@v6.10.0	7.0.0	1
owncloud/server :10.16.3	b3f9efdcd7f7	firebase/php-jwt@v6.10.0	7.0.0	1
passbolt/passbolt :3.9.0-2-ce-non-root	ec046e112d5c	firebase/php-jwt@v6.3.2	7.0.0	1
pe46dro/xbackbone-docker :3.3.3	09dfe3aa10f6	firebase/php-jwt@v5.2.0	7.0.0	1
phntom/fireflyiii :version-5.7.5	f881ea5fbbf1	firebase/php-jwt@v6.1.2	7.0.0	1
shyim/shopware :6.4.6.0	a951c0e6b836	firebase/php-jwt@v5.4.0	7.0.0	1
snipe/snipe-it :v8.3.1	141ebf2386fe	firebase/php-jwt@v6.11.1	7.0.0	1
snipe/snipe-it :v6.0.14	55fb7636a98c	firebase/php-jwt@v6.3.0	7.0.0	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-7.0.23	7d4d58086515	firebase/php-jwt@v6.10.0	7.0.0	1
ghcr.io/cedar2025/xboard :latest	896e4926e0d7	firebase/php-jwt@v6.11.1	7.0.0	1
ghcr.io/linuxserver/bookstack :version-v24.12.1	cc795b254b73	firebase/php-jwt@v6.10.2	7.0.0	1
ghcr.io/monicahq/monica-next :main	8be69156acbb	firebase/php-jwt@v6.11.1	7.0.0	1
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	firebase/php-jwt@v5.5.1	7.0.0	1
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	firebase/php-jwt@v5.2.0	7.0.0	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	firebase/php-jwt@v5.2.1	7.0.0	1