StackRadar

CVE-2025-65945

High

Advisory

Published 4 Dec 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.002
12th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
192
of 17,781 indexed, latest versions
Container images
189
deployed by those charts
Fix available
1 of 1
affected package

auth0/node-jws Improperly Verifies HMAC Signature

Carried by container images the latest versions of 192 of 17,781 indexed charts deploy, on 189 images.

Affected packageAffected versionsFixed inImages
jwsnpm3.2.2, 4.0.03.2.3, 4.0.1189
OSV records
GHSA-869p-cjfg-cm3x

Charts affected

192 by stars
ChartLatestAffected imagesRadar Score
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
codercom/code-server:4.11.0-debian1e2cc688008e
jws@4.0.0
4.0.1

Open the chart page →

31,844
flamerlex0.3.01 of 1See more

flame rlex 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
pawelmalak/flame:2.1.193e7b0abb603
jws@3.2.2
3.2.3

Open the chart page →

2,449
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
jws@4.0.0
4.0.1

Open the chart page →

2,823
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
jws@3.2.2
3.2.3

Open the chart page →

38,107
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
speckle/speckle-server:2.26.379f14a2bf931
jws@3.2.2
3.2.3

Open the chart page →

10,380
taigaunxwaresVerified publisher2026.3.81 of 6See more

taiga unxwares 2026.3.8

1 of the 6 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
taigaio/taiga-events:latest92fc0822564f
jws@3.2.2
3.2.3

Open the chart page →

9,148
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
jws@3.2.2
3.2.3

Open the chart page →

9,783
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
jws@3.2.2
3.2.3

Open the chart page →

25,443
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
jws@3.2.2
3.2.3

Open the chart page →

4,880
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
jws@4.0.0
4.0.1

Open the chart page →

3,437
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
jws@3.2.2
3.2.3

Open the chart page →

18,277
audiobookshelfbdclark-helm-chartsVerified publisher0.1.41 of 1See more

audiobookshelf bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
jws@3.2.2
3.2.3

Open the chart page →

1,722
http-debugbicarus-labs0.1.01 of 1See more

http-debug bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
bicarus/http-https-echo:2785dd6a7e805e
jws@3.2.2
3.2.3

Open the chart page →

867
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
jws@3.2.2
3.2.3

Open the chart page →

4,455
overseerrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

overseerr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
linuxserver/overseerr:1.35.06108ed066d4a
jws@4.0.0
4.0.1

Open the chart page →

3,071
ghostchart-ghost0.1.51 of 2See more

ghost chart-ghost 0.1.5

1 of the 2 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
library/ghost:6.22.0-alpine3.23ac533a6988ee
jws@3.2.2
3.2.3

Open the chart page →

4,083
audiobookshelfcharts-derwitt-devVerified publisher1.1.01 of 1See more

audiobookshelf charts-derwitt-dev 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
jws@3.2.2
3.2.3

Open the chart page →

1,722
audiobookshelfchristianhuthVerified publisher2.4.01 of 1See more

audiobookshelf christianhuth 2.4.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
jws@3.2.2
3.2.3

Open the chart page →

1,722
countlychristianhuthVerified publisher5.2.12 of 3See more

countly christianhuth 5.2.1

2 of the 3 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
countly/api:25.05.4f4cc7447c4f5
jws@3.2.2
3.2.3
countly/frontend:25.05.42acbc11499b6
jws@4.0.0
4.0.1

Open the chart page →

7,295
kamaji-consoleclastixVerified publisher0.1.31 of 1See more

kamaji-console clastix 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
jws@3.2.2
3.2.3

Open the chart page →

2,759
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad2 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
jws@3.2.2
3.2.3
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
jws@3.2.2
3.2.3

Open the chart page →

18,293
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
jws@3.2.2
3.2.3

Open the chart page →

5,141
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
jws@3.2.2
3.2.3

Open the chart page →

5,141
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
jws@3.2.2
3.2.3

Open the chart page →

5,141
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
coldatom/containers-security-api:latesteae9e82da080
jws@3.2.2
3.2.3

Open the chart page →

9,146
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
jws@4.0.0
4.0.1

Open the chart page →

14,559
kongacreate-databases0.1.01 of 1See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
jws@3.2.2
3.2.3

Open the chart page →

5,209
authfcryptexlabsVerified publisher0.12.131 of 4See more

authf cryptexlabs 0.12.13

1 of the 4 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
cryptexlabs/authf:0.12.11189c07411d7c
jws@3.2.2
3.2.3

Open the chart page →

3,769
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/doc2vec/mcp:1.1.14ace1de323f4a
jws@3.2.2
3.2.3

Open the chart page →

22,193
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
jws@3.2.2
3.2.3

Open the chart page →

4,551
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
jws@3.2.2
3.2.3

Open the chart page →

4,217
mergeabledoubanVerified publisher0.2.21 of 1See more

mergeable douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/leoquote/mergeable:latest451706815103
jws@3.2.2
3.2.3

Open the chart page →

4,223
dumpstoredumpstore0.1.11 of 2See more

dumpstore dumpstore 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
jws@3.2.2
3.2.3

Open the chart page →

4,251
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-user-service:1.049e164a9a439
jws@3.2.2
3.2.3

Open the chart page →

7,691
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
jws@3.2.2
3.2.3

Open the chart page →

64,489
keyrockfiware0.8.71 of 1See more

keyrock fiware 0.8.7

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
fiware/idm:8.3.3a1b6ed4ae84f
jws@3.2.2
3.2.3

Open the chart page →

3,159
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
jws@3.2.2
3.2.3

Open the chart page →

3,474
flamegabe565Verified publisher0.6.01 of 1See more

flame gabe565 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
pawelmalak/flame:multiarch2.3.19f88b17692a0
jws@3.2.2
3.2.3

Open the chart page →

2,172
rtlgaloymoney0.4.31 of 2See more

rtl galoymoney 0.4.3

1 of the 2 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.13.3e2195188a451
jws@3.2.2
3.2.3

Open the chart page →

2,090
rtlgaloymoney20.4.31 of 2See more

rtl galoymoney2 0.4.3

1 of the 2 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.13.3e2195188a451
jws@3.2.2
3.2.3

Open the chart page →

2,090
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
jws@3.2.2
3.2.3

Open the chart page →

12,222
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
jws@3.2.2
3.2.3

Open the chart page →

4,043
shinobigeek-cookbookVerified publisher1.2.21 of 1See more

shinobi geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
shinobisystems/shinobi:dev3ca746937856
jws@4.0.0
4.0.1

Open the chart page →

4,591
theloungegeek-cookbookVerified publisher3.4.21 of 1See more

thelounge geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
thelounge/thelounge:4.2.0-alpine639978459c3a
jws@4.0.0
4.0.1

Open the chart page →

2,689
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
jws@3.2.2
3.2.3

Open the chart page →

9,019
contentbridgeglenndehaanVerified publisher1.1.01 of 1See more

contentbridge glenndehaan 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
glenndehaan/contentbridge:latest99b9e4f73848
jws@3.2.2
3.2.3

Open the chart page →

1,000
Governify-Bluejaygovernify0.1.02 of 12See more

Governify-Bluejay governify 0.1.0

2 of the 12 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
governify/director:v1.4.0608c6940bb98
jws@3.2.2
3.2.3
governify/registry:v3.4.0d3f37f4f8168
jws@3.2.2
3.2.3

Open the chart page →

22,512
Governify-Falcongovernify0.1.03 of 10See more

Governify-Falcon governify 0.1.0

3 of the 10 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
governify/collector-dynamic:v1.3.06d3d1a5b46a9
jws@3.2.2
3.2.3
governify/director:v1.4.0608c6940bb98
jws@3.2.2
3.2.3
governify/registry:v3.4.0d3f37f4f8168
jws@3.2.2
3.2.3

Open the chart page →

24,319
hive-appgraphql-hive1.0.01 of 1See more

hive-app graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
jws@3.2.2
3.2.3

Open the chart page →

2,682
hive-appgraphql-hive-subcharts1.0.01 of 1See more

hive-app graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
jws@3.2.2
3.2.3

Open the chart page →

2,682

Container images carrying it

189 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
governify/collector-dynamic:v1.3.06d3d1a5b46a9
jws@3.2.2
3.2.3
1
gristlabs/grist:0.7.96e71b1914a7e
jws@4.0.0
4.0.1
1
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
jws@3.2.2
3.2.3
1
i4trust/pdc-portal:2.0.03e77858e1219
jws@3.2.2
3.2.3
1
jakowenko/double-take:1.6.0b858bac9e32a
jws@3.2.2
3.2.3
1
jayfong/yapi:1.10.2163e5d621910
jws@3.2.2
3.2.3
1
kubebb/bff-server:v0.2.0-202312040fbb732379bc
jws@3.2.2
3.2.3
1
kubebb/component-store:latestfd8ecbd73213
jws@3.2.2
3.2.3
1
kubeflownotebookswg/centraldashboard:v1.6.137300551dea6
jws@4.0.0
4.0.1
1
kubeflownotebookswg/centraldashboard:v1.9.2af55c22ef5de
jws@4.0.0
4.0.1
1
kubevious/parser:1.0.151acf1a1f0b47
jws@3.2.2
3.2.3
1
kubevious/parser:1.2.299ae7a5168c2
jws@3.2.2
3.2.3
1
library/ghost:6.25.12654b1e90413
jws@3.2.2
3.2.3
1
library/ghost:4.37.0767230c0f263
jws@3.2.2
3.2.3
1
library/ghost:5.79.083f7bf209844
jws@3.2.2
3.2.3
1
library/ghost:6.22.0-alpine3.23ac533a6988ee
jws@3.2.2
3.2.3
1
library/kibana:8.18.004c0fc150f3a
jws@3.2.2
3.2.3
1
linuxserver/code-server:4.10.1a5e43a05ae79
jws@4.0.0
4.0.1
1
linuxserver/codimd:latestb801bbcf6386
jws@3.2.2
3.2.3
1
linuxserver/overseerr:1.35.06108ed066d4a
jws@4.0.0
4.0.1
1
louislam/uptime-kuma:1.22.10b55bcb83a1c
jws@3.2.2
3.2.3
1
louislam/uptime-kuma:13d632903e6af
jws@3.2.2
3.2.3
1
louislam/uptime-kuma:2.0.24c364ef96aad
jws@3.2.2
3.2.3
1
louislam/uptime-kuma:1.23.1396510915e6be
jws@3.2.2
3.2.3
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
jws@3.2.2
3.2.3
1
louislam/uptime-kuma:1.17.1a4eab252e5a2
jws@3.2.2
3.2.3
1
louislam/uptime-kuma:1.18.5a84767d7934f
jws@3.2.2
3.2.3
1
louislam/uptime-kuma:1.23.12bc6f244ecf27
jws@3.2.2
3.2.3
1
lukasreining/open-api-schema-collector:0.1.050e021c42e33
jws@3.2.2
3.2.3
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
jws@3.2.2
3.2.3
1
mintproject/ensemble-manager:d5656dbc01623e291564d2894c72f0e7cb2408f4222e3b941a36
jws@3.2.2
3.2.3
1
misskey/misskey:12.110.1e08b7c478093
jws@4.0.0
4.0.1
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
jws@3.2.2
3.2.3
1
moreillon/api-proxy:latestd7d4a5463525
jws@3.2.2
3.2.3
1
moreillon/camera-proxy:latestce60056b50c2
jws@3.2.2
3.2.3
1
moreillon/food-manager:lateste8fd856e593d
jws@3.2.2
3.2.3
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
jws@3.2.2
3.2.3
1
n8nio/n8n:1.86.08b39ed5a2de9
jws@4.0.0
4.0.1
1
n8nio/n8n:0.212.0a9195bc499a3
jws@3.2.2
3.2.3
1
n8nio/n8n:1.33.1dd171d45102a
jws@3.2.2
3.2.3
1
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
jws@3.2.2
3.2.3
1
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
jws@3.2.2
3.2.3
1
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
jws@3.2.2
3.2.3
1
nocodb/nocodb:0.258.06779a4ddedf2
jws@3.2.2
3.2.3
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
jws@3.2.2
3.2.3
1
ondrejsika/parking:latestb1fd497416c8
jws@3.2.2
3.2.3
1
openhab/openhab-cloud:a8138a329dd2bac8c4b
jws@4.0.0
4.0.1
1
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
jws@3.2.2
3.2.3
1
outlinewiki/outline:0.82.0494dfb9249a6
jws@3.2.2
3.2.3
1
pawelmalak/flame:2.1.193e7b0abb603
jws@3.2.2
3.2.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.