StackRadar

CVE-2025-65945

High

Advisory

Published 4 Dec 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.002
12th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
192
of 17,781 indexed, latest versions
Container images
189
deployed by those charts
Fix available
1 of 1
affected package

auth0/node-jws Improperly Verifies HMAC Signature

Carried by container images the latest versions of 192 of 17,781 indexed charts deploy, on 189 images.

Affected packageAffected versionsFixed inImages
jwsnpm3.2.2, 4.0.03.2.3, 4.0.1189
OSV records
GHSA-869p-cjfg-cm3x

Charts affected

192 by stars
ChartLatestAffected imagesRadar Score
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
codercom/code-server:4.11.0-debian1e2cc688008e
jws@4.0.0
4.0.1

Open the chart page →

31,844
flamerlex0.3.01 of 1See more

flame rlex 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
pawelmalak/flame:2.1.193e7b0abb603
jws@3.2.2
3.2.3

Open the chart page →

2,449
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
jws@4.0.0
4.0.1

Open the chart page →

2,823
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
jws@3.2.2
3.2.3

Open the chart page →

38,107
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
speckle/speckle-server:2.26.379f14a2bf931
jws@3.2.2
3.2.3

Open the chart page →

10,380
taigaunxwaresVerified publisher2026.3.81 of 6See more

taiga unxwares 2026.3.8

1 of the 6 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
taigaio/taiga-events:latest92fc0822564f
jws@3.2.2
3.2.3

Open the chart page →

9,148
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
jws@3.2.2
3.2.3

Open the chart page →

9,783
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
jws@3.2.2
3.2.3

Open the chart page →

25,443
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
jws@3.2.2
3.2.3

Open the chart page →

4,880
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
jws@4.0.0
4.0.1

Open the chart page →

3,437
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
jws@3.2.2
3.2.3

Open the chart page →

18,277
audiobookshelfbdclark-helm-chartsVerified publisher0.1.41 of 1See more

audiobookshelf bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
jws@3.2.2
3.2.3

Open the chart page →

1,722
http-debugbicarus-labs0.1.01 of 1See more

http-debug bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
bicarus/http-https-echo:2785dd6a7e805e
jws@3.2.2
3.2.3

Open the chart page →

867
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
jws@3.2.2
3.2.3

Open the chart page →

4,455
overseerrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

overseerr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
linuxserver/overseerr:1.35.06108ed066d4a
jws@4.0.0
4.0.1

Open the chart page →

3,071
ghostchart-ghost0.1.51 of 2See more

ghost chart-ghost 0.1.5

1 of the 2 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
library/ghost:6.22.0-alpine3.23ac533a6988ee
jws@3.2.2
3.2.3

Open the chart page →

4,083
audiobookshelfcharts-derwitt-devVerified publisher1.1.01 of 1See more

audiobookshelf charts-derwitt-dev 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
jws@3.2.2
3.2.3

Open the chart page →

1,722
audiobookshelfchristianhuthVerified publisher2.4.01 of 1See more

audiobookshelf christianhuth 2.4.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
jws@3.2.2
3.2.3

Open the chart page →

1,722
countlychristianhuthVerified publisher5.2.12 of 3See more

countly christianhuth 5.2.1

2 of the 3 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
countly/api:25.05.4f4cc7447c4f5
jws@3.2.2
3.2.3
countly/frontend:25.05.42acbc11499b6
jws@4.0.0
4.0.1

Open the chart page →

7,295
kamaji-consoleclastixVerified publisher0.1.31 of 1See more

kamaji-console clastix 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
jws@3.2.2
3.2.3

Open the chart page →

2,759
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad2 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
jws@3.2.2
3.2.3
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
jws@3.2.2
3.2.3

Open the chart page →

18,293
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
jws@3.2.2
3.2.3

Open the chart page →

5,141
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
jws@3.2.2
3.2.3

Open the chart page →

5,141
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
jws@3.2.2
3.2.3

Open the chart page →

5,141
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
coldatom/containers-security-api:latesteae9e82da080
jws@3.2.2
3.2.3

Open the chart page →

9,146
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
jws@4.0.0
4.0.1

Open the chart page →

14,559
kongacreate-databases0.1.01 of 1See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
jws@3.2.2
3.2.3

Open the chart page →

5,209
authfcryptexlabsVerified publisher0.12.131 of 4See more

authf cryptexlabs 0.12.13

1 of the 4 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
cryptexlabs/authf:0.12.11189c07411d7c
jws@3.2.2
3.2.3

Open the chart page →

3,769
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/doc2vec/mcp:1.1.14ace1de323f4a
jws@3.2.2
3.2.3

Open the chart page →

22,193
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
jws@3.2.2
3.2.3

Open the chart page →

4,551
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
jws@3.2.2
3.2.3

Open the chart page →

4,217
mergeabledoubanVerified publisher0.2.21 of 1See more

mergeable douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/leoquote/mergeable:latest451706815103
jws@3.2.2
3.2.3

Open the chart page →

4,223
dumpstoredumpstore0.1.11 of 2See more

dumpstore dumpstore 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
jws@3.2.2
3.2.3

Open the chart page →

4,251
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-user-service:1.049e164a9a439
jws@3.2.2
3.2.3

Open the chart page →

7,691
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
jws@3.2.2
3.2.3

Open the chart page →

64,489
keyrockfiware0.8.71 of 1See more

keyrock fiware 0.8.7

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
fiware/idm:8.3.3a1b6ed4ae84f
jws@3.2.2
3.2.3

Open the chart page →

3,159
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
jws@3.2.2
3.2.3

Open the chart page →

3,474
flamegabe565Verified publisher0.6.01 of 1See more

flame gabe565 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
pawelmalak/flame:multiarch2.3.19f88b17692a0
jws@3.2.2
3.2.3

Open the chart page →

2,172
rtlgaloymoney0.4.31 of 2See more

rtl galoymoney 0.4.3

1 of the 2 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.13.3e2195188a451
jws@3.2.2
3.2.3

Open the chart page →

2,090
rtlgaloymoney20.4.31 of 2See more

rtl galoymoney2 0.4.3

1 of the 2 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.13.3e2195188a451
jws@3.2.2
3.2.3

Open the chart page →

2,090
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
jws@3.2.2
3.2.3

Open the chart page →

12,222
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
jws@3.2.2
3.2.3

Open the chart page →

4,043
shinobigeek-cookbookVerified publisher1.2.21 of 1See more

shinobi geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
shinobisystems/shinobi:dev3ca746937856
jws@4.0.0
4.0.1

Open the chart page →

4,591
theloungegeek-cookbookVerified publisher3.4.21 of 1See more

thelounge geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
thelounge/thelounge:4.2.0-alpine639978459c3a
jws@4.0.0
4.0.1

Open the chart page →

2,689
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
jws@3.2.2
3.2.3

Open the chart page →

9,019
contentbridgeglenndehaanVerified publisher1.1.01 of 1See more

contentbridge glenndehaan 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
glenndehaan/contentbridge:latest99b9e4f73848
jws@3.2.2
3.2.3

Open the chart page →

1,000
Governify-Bluejaygovernify0.1.02 of 12See more

Governify-Bluejay governify 0.1.0

2 of the 12 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
governify/director:v1.4.0608c6940bb98
jws@3.2.2
3.2.3
governify/registry:v3.4.0d3f37f4f8168
jws@3.2.2
3.2.3

Open the chart page →

22,512
Governify-Falcongovernify0.1.03 of 10See more

Governify-Falcon governify 0.1.0

3 of the 10 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
governify/collector-dynamic:v1.3.06d3d1a5b46a9
jws@3.2.2
3.2.3
governify/director:v1.4.0608c6940bb98
jws@3.2.2
3.2.3
governify/registry:v3.4.0d3f37f4f8168
jws@3.2.2
3.2.3

Open the chart page →

24,319
hive-appgraphql-hive1.0.01 of 1See more

hive-app graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
jws@3.2.2
3.2.3

Open the chart page →

2,682
hive-appgraphql-hive-subcharts1.0.01 of 1See more

hive-app graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
jws@3.2.2
3.2.3

Open the chart page →

2,682

Container images carrying it

189 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
pawelmalak/flame:multiarch2.3.19f88b17692a0
jws@3.2.2
3.2.3
1
phntom/codimd:2.4.31b9aafbb62e6
jws@3.2.2
3.2.3
1
polonel/trudesk:1.2.60cf6513f6fe3
jws@3.2.2
3.2.3
1
redis/redisinsight:2.68019fcf774631
jws@3.2.2
3.2.3
1
requarks/wiki:canary-2.5.2438b5865a7386c
jws@3.2.2
3.2.3
1
roadiehq/community-backstage-image:latestef355bf5b639
jws@3.2.2
3.2.3
1
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
jws@3.2.2
3.2.3
1
samajh/alprbackend:latestea742b4372ad
jws@3.2.2
3.2.3
1
shahanafarooqui/rtl:0.11.0d0cd3d868aca
jws@3.2.2
3.2.3
1
shinobisystems/shinobi:dev3ca746937856
jws@4.0.0
4.0.1
1
shinobisystems/shinobi:latestc2f5ce2e1067
jws@4.0.0
4.0.1
1
sigp/siren:v3.0.42c219b04758e
jws@3.2.2
3.2.3
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
jws@4.0.0
4.0.1
1
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
jws@4.0.0
4.0.1
1
socialmediamacroscope/smile_server:0.3.31a528c794270
jws@3.2.2
3.2.3
1
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
jws@3.2.2
3.2.3
1
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
jws@3.2.2
3.2.3
1
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
jws@3.2.2
3.2.3
1
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
jws@3.2.2
3.2.3
1
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
jws@3.2.2
3.2.3
1
speckle/speckle-server:2.26.379f14a2bf931
jws@3.2.2
3.2.3
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
jws@3.2.2
3.2.3
1
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
jws@3.2.2
3.2.3
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
jws@3.2.2
3.2.3
1
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
jws@3.2.2
3.2.3
1
sqlpad/sqlpad:6.7d3d2f430dffd
jws@4.0.0
4.0.1
1
stanfordoval/almond-server:latest1a63cdccedaf
jws@3.2.2
3.2.3
1
supabase/storage-api:v1.12.0f983fb50bd95
jws@3.2.2
3.2.3
1
taigaio/taiga-events:6.4.00bf2d24a57d9
jws@3.2.2
3.2.3
1
thecodingmachine/workadventure-back:v1.17.764001369dad5
jws@3.2.2
3.2.3
1
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
jws@3.2.2
3.2.3
1
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
jws@3.2.2
3.2.3
1
thelounge/thelounge:4.3.0-alpine0037aa258261
jws@4.0.0
4.0.1
1
thelounge/thelounge:4.2.0-alpine639978459c3a
jws@4.0.0
4.0.1
1
thingsboard/tb-js-executor:3.4.113e1eadf8ace
jws@4.0.0
4.0.1
1
thmmniii/fbs-qcm-backend:v1.27.1afbe511e5c24
jws@3.2.2
3.2.3
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
jws@3.2.2
3.2.3
1
tzahi12345/youtubedl-material:4.23720b856bd2f
jws@3.2.2
3.2.3
1
ubercadence/web:v3.29.58564a5b44a6d
jws@3.2.2
3.2.3
1
vcnngr/pnbackend:latesteaf44ad0ad1f
jws@3.2.2
3.2.3
1
visualregressiontracker/api:5.0.11941aeb8c8bf9
jws@3.2.2
3.2.3
1
youssef11gaber10/deployment-ui-react:latestba6853e35c60
jws@3.2.2
3.2.3
1
zooz/predator:1.6f491d1f7a865
jws@3.2.2
3.2.3
1
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
jws@3.2.2
3.2.3
1
gcr.io/google-samples/microservices-demo/currencyservice:v0.2.349d458a3650f
jws@4.0.0
4.0.1
1
gcr.io/google-samples/microservices-demo/paymentservice:v0.2.36eb201217a8f
jws@4.0.0
4.0.1
1
ghcr.io/advplyr/audiobookshelf:2.0.3140aed2752c3
jws@3.2.2
3.2.3
1
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
jws@3.2.2
3.2.3
1
ghcr.io/beluga-cloud/actual/actualserver:23.12.1c8a0d5ec5a12
jws@4.0.0
4.0.1
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
jws@3.2.2
3.2.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.