CVE-2025-68158
MediumAdvisory
Published 8 Jan 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.7
- base score, highest
- EPSS
- 0.003
- 20th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 28
- of 17,781 indexed, latest versions
- Container images
- 28
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Authlib has 1-click Account Takeover vulnerability
Carried by container images the latest versions of 28 of 17,781 indexed charts deploy, on 28 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| authlibpypi | 1.2.0, 1.2.1, 1.3.0, 1.3.1+7 more | 1.6.6 | 28 |
- OSV records
- GHSA-fg6f-75jq-6523
- Also known as
- PYSEC-2026-1201
Charts affected
28 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| airflowairflow-helmVerified publisher | 8.9.0 | 1 of 4See more | 11,367 |
| synapsehalkeye | 0.40.0 | 1 of 2See more | 6,543 |
| homeassistantvolker-raschekVerified publisher | 0.2.3 | 1 of 1See more | 6,041 |
| openshift-secured-pgadmineximiaitVerified publisher | 0.2.0 | 1 of 2See more | 14,546 |
| mealieth-chartsVerified publisher | 0.5.1 | 1 of 1See more | 3,804 |
| difykubeblocksVerified publisher | 0.5.1 | 1 of 5See more | 20,403 |
| mealiertomik-helm-chartsVerified publisher | 0.0.2 | 1 of 1See more | 3,929 |
| pgadminappscodeVerified publisher | 2026.3.30 | 1 of 1See more | 1,565 |
| csghubcsghubVerified publisher | 2.4.3 | 1 of 34See more | 58,897 |
| home-assistantdamounVerified publisher | 1.1.0 | 1 of 1See more | 6,179 |
| difydify | 1.0.0 | 1 of 4See more | 19,224 |
| rommernail-romm | 1.0.1 | 1 of 1See more | 2,896 |
| infrafibonacci-cluster-infraVerified publisher | 1.0.0 | 1 of 4See more | 12,454 |
| home-assistanthelm-chart-roeiVerified publisher | 2025.3.0 | 1 of 1See more | 4,647 |
| intelowlintelowl-helm | 6.6.1-01-06-2026 | 1 of 5See more | 17,852 |
| home-assistantkfirfer | 0.5.4 | 1 of 1See more | 6,447 |
| aperagkubeblocksVerified publisher | 0.0.0-nightly | 1 of 3See more | 8,405 |
| osdfir-infrastructureosdfir-infrastructureVerified publisher | 2.15.0 | 1 of 40See more | 71,208 |
| yetiosdfir-infrastructureVerified publisher | 1.0.5 | 1 of 4See more | 6,583 |
| powerdnspuckpuck | 2.0.0 | 1 of 4See more | 4,616 |
| rada-platformrada-platform | 0.1.0 | 1 of 7See more | 21,211 |
| matrix-stackrock8sVerified publisher | 0.8.1 | 1 of 7See more | 9,256 |
| airflowsb-helm-charts | 0.3.0 | 1 of 1See more | 10,209 |
| pgadminsb-helm-charts | 0.3.0 | 1 of 1See more | 1,713 |
| mealiesmarthallVerified publisher | 0.0.10 | 1 of 1See more | 5,565 |
| verbasubstratusVerified publisher | 0.4.0 | 1 of 1See more | 13,390 |
| synapsetranhailongVerified publisher | 0.1.0 | 1 of 2See more | 3,164 |
| simple-prima-notavcnngrVerified publisher | 0.5.3 | 1 of 4See more | 4,768 |
Container images carrying it
28 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| apache/ | 64e58748b6b9 | authlib | 1.6.6 | 1 |
| apache/ | ce90bdc3d2af | authlib | 1.6.6 | 1 |
| apache/ | e5560ad0b86e | authlib | 1.6.6 | 1 |
| apecloud/ | 8ac9947a2c84 | authlib | 1.6.6 | 1 |
| dpage/ | 18cd5711fc9a | authlib | 1.6.6 | 1 |
| dpage/ | 37946e4f3e7b | authlib | 1.6.6 | 1 |
| dpage/ | 50700ac17936 | authlib | 1.6.6 | 1 |
| dpage/ | 52cb72a9e3da | authlib | 1.6.6 | 1 |
| dpage/ | 561c1f8f99f2 | authlib | 1.6.6 | 1 |
| homeassistant/ | 021e2afc6e57 | authlib | 1.6.6 | 1 |
| homeassistant/ | 8d000332b09b | authlib | 1.6.6 | 1 |
| intelowlproject/ | 0b22e547ea6b | authlib | 1.6.6 | 1 |
| langgenius/ | 066035f93856 | authlib | 1.6.6 | 1 |
| langgenius/ | fca918260dd6 | authlib | 1.6.6 | 1 |
| matrixdotorg/ | c3c4a9de2a0b | authlib | 1.6.6 | 1 |
| matrixdotorg/ | def97fd537d8 | authlib | 1.6.6 | 1 |
| opencsghq/ | 2f03fead54db | authlib | 1.6.6 | 1 |
| pschiffe/ | 37ebba8c2b8f | authlib | 1.6.6 | 1 |
| rommapp/ | b909e95d1aab | authlib | 1.6.6 | 1 |
| substratusai/ | 61695be635eb | authlib | 1.6.6 | 1 |
| yetiplatform/ | 9bcbe2650a14 | authlib | 1.6.6 | 1 |
| yetiplatform/ | 9c3006cedcca | authlib | 1.6.6 | 1 |
| ghcr.io/ | 22ae556e0de4 | authlib | 1.6.6 | 1 |
| ghcr.io/ | 26c51e44d932 | authlib | 1.6.6 | 1 |
| ghcr.io/ | feffc0b8227d | authlib | 1.6.6 | 1 |
| ghcr.io/ | 322369a5b748 | authlib | 1.6.6 | 1 |
| ghcr.io/ | b56da41cf178 | authlib | 1.6.6 | 1 |
| ghcr.io/ | bb2939094eed | authlib | 1.6.6 | 1 |