StackRadar

CVE-2025-65945

High

Advisory

Published 4 Dec 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.002
12th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
192
of 17,781 indexed, latest versions
Container images
189
deployed by those charts
Fix available
1 of 1
affected package

auth0/node-jws Improperly Verifies HMAC Signature

Carried by container images the latest versions of 192 of 17,781 indexed charts deploy, on 189 images.

Affected packageAffected versionsFixed inImages
jwsnpm3.2.2, 4.0.03.2.3, 4.0.1189
OSV records
GHSA-869p-cjfg-cm3x

Charts affected

192 by stars
ChartLatestAffected imagesRadar Score
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
codercom/code-server:4.11.0-debian1e2cc688008e
jws@4.0.0
4.0.1

Open the chart page →

31,844
flamerlex0.3.01 of 1See more

flame rlex 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
pawelmalak/flame:2.1.193e7b0abb603
jws@3.2.2
3.2.3

Open the chart page →

2,449
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
jws@4.0.0
4.0.1

Open the chart page →

2,823
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
jws@3.2.2
3.2.3

Open the chart page →

38,107
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
speckle/speckle-server:2.26.379f14a2bf931
jws@3.2.2
3.2.3

Open the chart page →

10,380
taigaunxwaresVerified publisher2026.3.81 of 6See more

taiga unxwares 2026.3.8

1 of the 6 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
taigaio/taiga-events:latest92fc0822564f
jws@3.2.2
3.2.3

Open the chart page →

9,148
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
jws@3.2.2
3.2.3

Open the chart page →

9,783
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
jws@3.2.2
3.2.3

Open the chart page →

25,443
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
jws@3.2.2
3.2.3

Open the chart page →

4,880
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
jws@4.0.0
4.0.1

Open the chart page →

3,437
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
jws@3.2.2
3.2.3

Open the chart page →

18,277
audiobookshelfbdclark-helm-chartsVerified publisher0.1.41 of 1See more

audiobookshelf bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
jws@3.2.2
3.2.3

Open the chart page →

1,722
http-debugbicarus-labs0.1.01 of 1See more

http-debug bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
bicarus/http-https-echo:2785dd6a7e805e
jws@3.2.2
3.2.3

Open the chart page →

867
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
jws@3.2.2
3.2.3

Open the chart page →

4,455
overseerrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

overseerr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
linuxserver/overseerr:1.35.06108ed066d4a
jws@4.0.0
4.0.1

Open the chart page →

3,071
ghostchart-ghost0.1.51 of 2See more

ghost chart-ghost 0.1.5

1 of the 2 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
library/ghost:6.22.0-alpine3.23ac533a6988ee
jws@3.2.2
3.2.3

Open the chart page →

4,083
audiobookshelfcharts-derwitt-devVerified publisher1.1.01 of 1See more

audiobookshelf charts-derwitt-dev 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
jws@3.2.2
3.2.3

Open the chart page →

1,722
audiobookshelfchristianhuthVerified publisher2.4.01 of 1See more

audiobookshelf christianhuth 2.4.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
jws@3.2.2
3.2.3

Open the chart page →

1,722
countlychristianhuthVerified publisher5.2.12 of 3See more

countly christianhuth 5.2.1

2 of the 3 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
countly/api:25.05.4f4cc7447c4f5
jws@3.2.2
3.2.3
countly/frontend:25.05.42acbc11499b6
jws@4.0.0
4.0.1

Open the chart page →

7,295
kamaji-consoleclastixVerified publisher0.1.31 of 1See more

kamaji-console clastix 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
jws@3.2.2
3.2.3

Open the chart page →

2,759
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad2 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
jws@3.2.2
3.2.3
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
jws@3.2.2
3.2.3

Open the chart page →

18,293
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
jws@3.2.2
3.2.3

Open the chart page →

5,141
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
jws@3.2.2
3.2.3

Open the chart page →

5,141
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
jws@3.2.2
3.2.3

Open the chart page →

5,141
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
coldatom/containers-security-api:latesteae9e82da080
jws@3.2.2
3.2.3

Open the chart page →

9,146
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
jws@4.0.0
4.0.1

Open the chart page →

14,559
kongacreate-databases0.1.01 of 1See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
jws@3.2.2
3.2.3

Open the chart page →

5,209
authfcryptexlabsVerified publisher0.12.131 of 4See more

authf cryptexlabs 0.12.13

1 of the 4 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
cryptexlabs/authf:0.12.11189c07411d7c
jws@3.2.2
3.2.3

Open the chart page →

3,769
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/doc2vec/mcp:1.1.14ace1de323f4a
jws@3.2.2
3.2.3

Open the chart page →

22,193
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
jws@3.2.2
3.2.3

Open the chart page →

4,551
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
jws@3.2.2
3.2.3

Open the chart page →

4,217
mergeabledoubanVerified publisher0.2.21 of 1See more

mergeable douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/leoquote/mergeable:latest451706815103
jws@3.2.2
3.2.3

Open the chart page →

4,223
dumpstoredumpstore0.1.11 of 2See more

dumpstore dumpstore 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
jws@3.2.2
3.2.3

Open the chart page →

4,251
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-user-service:1.049e164a9a439
jws@3.2.2
3.2.3

Open the chart page →

7,691
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
jws@3.2.2
3.2.3

Open the chart page →

64,489
keyrockfiware0.8.71 of 1See more

keyrock fiware 0.8.7

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
fiware/idm:8.3.3a1b6ed4ae84f
jws@3.2.2
3.2.3

Open the chart page →

3,159
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
jws@3.2.2
3.2.3

Open the chart page →

3,474
flamegabe565Verified publisher0.6.01 of 1See more

flame gabe565 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
pawelmalak/flame:multiarch2.3.19f88b17692a0
jws@3.2.2
3.2.3

Open the chart page →

2,172
rtlgaloymoney0.4.31 of 2See more

rtl galoymoney 0.4.3

1 of the 2 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.13.3e2195188a451
jws@3.2.2
3.2.3

Open the chart page →

2,090
rtlgaloymoney20.4.31 of 2See more

rtl galoymoney2 0.4.3

1 of the 2 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.13.3e2195188a451
jws@3.2.2
3.2.3

Open the chart page →

2,090
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
jws@3.2.2
3.2.3

Open the chart page →

12,222
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
jws@3.2.2
3.2.3

Open the chart page →

4,043
shinobigeek-cookbookVerified publisher1.2.21 of 1See more

shinobi geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
shinobisystems/shinobi:dev3ca746937856
jws@4.0.0
4.0.1

Open the chart page →

4,591
theloungegeek-cookbookVerified publisher3.4.21 of 1See more

thelounge geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
thelounge/thelounge:4.2.0-alpine639978459c3a
jws@4.0.0
4.0.1

Open the chart page →

2,689
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
jws@3.2.2
3.2.3

Open the chart page →

9,019
contentbridgeglenndehaanVerified publisher1.1.01 of 1See more

contentbridge glenndehaan 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
glenndehaan/contentbridge:latest99b9e4f73848
jws@3.2.2
3.2.3

Open the chart page →

1,000
Governify-Bluejaygovernify0.1.02 of 12See more

Governify-Bluejay governify 0.1.0

2 of the 12 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
governify/director:v1.4.0608c6940bb98
jws@3.2.2
3.2.3
governify/registry:v3.4.0d3f37f4f8168
jws@3.2.2
3.2.3

Open the chart page →

22,512
Governify-Falcongovernify0.1.03 of 10See more

Governify-Falcon governify 0.1.0

3 of the 10 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
governify/collector-dynamic:v1.3.06d3d1a5b46a9
jws@3.2.2
3.2.3
governify/director:v1.4.0608c6940bb98
jws@3.2.2
3.2.3
governify/registry:v3.4.0d3f37f4f8168
jws@3.2.2
3.2.3

Open the chart page →

24,319
hive-appgraphql-hive1.0.01 of 1See more

hive-app graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
jws@3.2.2
3.2.3

Open the chart page →

2,682
hive-appgraphql-hive-subcharts1.0.01 of 1See more

hive-app graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-65945.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
jws@3.2.2
3.2.3

Open the chart page →

2,682

Container images carrying it

189 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
mojaloop/event-sidecar:v11.0.189b8ab71b74b
jws@4.0.0
4.0.1
5
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
jws@3.2.2
3.2.3
4
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
jws@3.2.2
3.2.3
3
pantsel/konga:latestc8172b75607d
jws@3.2.2
3.2.3
3
rcdelacruz/my-strapi-app:js-amd6438007f358355
jws@3.2.2
3.2.3
3
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
jws@3.2.2
3.2.3
3
agoldis/sorry-cypress-director:2.5.1110228ecd353b
jws@3.2.2
3.2.3
2
governify/director:v1.4.0608c6940bb98
jws@3.2.2
3.2.3
2
governify/registry:v3.4.0d3f37f4f8168
jws@3.2.2
3.2.3
2
gradiant/open5gs-webui:2.7.5fbd10c017541
jws@3.2.2
3.2.3
2
hoppscotch/hoppscotch:2024.8.2f1da831950b7
jws@3.2.2
3.2.3
2
mesosphere/kommander:6.100.13917e82333a9
jws@3.2.2
3.2.3
2
mojaloop/central-ledger:v13.14.01abc8a7aa71c
jws@3.2.2
3.2.3
2
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
jws@4.0.0
4.0.1
2
mojaloop/reporting:v12.1.0d480a62103d6
jws@4.0.0
4.0.1
2
mojaloop/role-assignment-service:v2.1.0def4bf273721
jws@4.0.0
4.0.1
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
jws@3.2.2
3.2.3
2
outlinewiki/outline:0.69.1d060dcd8f9aa
jws@3.2.2
3.2.3
2
rajnandan1/kener:3.2.1930407afca731
jws@3.2.2
3.2.3
2
shahanafarooqui/rtl:0.13.3e2195188a451
jws@3.2.2
3.2.3
2
taigaio/taiga-events:latest92fc0822564f
jws@3.2.2
3.2.3
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
jws@3.2.2
3.2.3
2
activepieces/activepieces:0.23.0c26188b44e62
jws@3.2.2
3.2.3
1
actualbudget/actual-server:25.3.158fecd9088b7
jws@4.0.0
4.0.1
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
jws@3.2.2
3.2.3
1
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
jws@3.2.2
3.2.3
1
automatischio/automatisch:0.15.03bace7a12d5f
jws@3.2.2
3.2.3
1
bicarus/http-https-echo:2785dd6a7e805e
jws@3.2.2
3.2.3
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
jws@3.2.2
3.2.3
1
chandanteekinavar/findery-market-user-service:1.049e164a9a439
jws@3.2.2
3.2.3
1
chibisafe/chibisafe-server:latest3da4fcbc1a18
jws@3.2.2
3.2.3
1
codercom/code-server:4.11.0-debian1e2cc688008e
jws@4.0.0
4.0.1
1
codetogether/codetogether:latest4348c8a38752
jws@3.2.2
3.2.3
1
coldatom/containers-security-api:latesteae9e82da080
jws@3.2.2
3.2.3
1
countly/api:25.05.4f4cc7447c4f5
jws@3.2.2
3.2.3
1
countly/countly-server:25.05.4e3c238248f99
jws@4.0.0
4.0.1
1
countly/frontend:25.05.42acbc11499b6
jws@4.0.0
4.0.1
1
cryptexlabs/authf:0.12.11189c07411d7c
jws@3.2.2
3.2.3
1
davdiv/musicociel:deva85f99be882c
jws@3.2.2
3.2.3
1
denisshav/backend:latest4cc8dc5a4499
jws@3.2.2
3.2.3
1
directus/directus:11.1.0e3c8bb975350
jws@3.2.2
3.2.3
1
diygod/rsshub:2025-11-097a6312cac0d5
jws@4.0.0
4.0.1
1
evoapicloud/evolution-api:latest966625532d90
jws@3.2.2
3.2.3
1
fallenbagel/jellyseerr:latest4538137bc5af
jws@4.0.0
4.0.1
1
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
jws@4.0.0
4.0.1
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
jws@3.2.2
3.2.3
1
fiware/idm:8.3.3a1b6ed4ae84f
jws@3.2.2
3.2.3
1
fonoster/routr-connect:2.13.6e8c84b5eaa67
jws@3.2.2
3.2.3
1
getferdi/ferdi-server:1.3.26e620b85afaa
jws@3.2.2
3.2.3
1
glenndehaan/contentbridge:latest99b9e4f73848
jws@3.2.2
3.2.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.