StackRadar

CVE-2026-25645

Medium

Advisory

Published 25 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
869
of 17,790 indexed, latest versions
Container images
918
deployed by those charts
Fix available
3 of 5
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 869 of 17,790 indexed charts deploy, on 918 images.

Affected packageAffected versionsFixed inImages
requestspypi2.2.1, 2.6.0, 2.9.1, 2.10.0+27 more2.33.0880
requestsdeb2.2.1-1, 2.2.1-1ubuntu0.3, 2.9.1-3, 2.9.1-3ubuntu0.1+8 moreno fix listed71
py3-requestsapk2.32.3-r0, 2.32.4-r0, 2.32.5-r02.33.1-r07
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+23 moreno fix listed108
py3-pipapk25.0.1-r0, 25.2-r0, 26.0.1-r126.1.1-r03
OSV records
ALPINE-CVE-2026-25645CGA-8rh8-wj4q-c4fxCGA-p6r3-cg4x-wxcmDEBIAN-CVE-2026-25645PYSEC-2026-2275UBUNTU-CVE-2026-25645
Also known as
CGA-hq6f-pr48-q7w8, CGA-wfp2-2xhv-mx6w, GHSA-gc5v-m9x4-r6x2

Charts affected

869 by stars
ChartLatestAffected imagesRadar Score
plausible-analyticsimioVerified publisher0.4.21 of 5See more

plausible-analytics imio 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.0.114c1afde21d6
py3-requests@2.32.3-r0
requests@2.32.3
2.33.1-r0
2.33.0

Open the chart page →

10,502
erpnextimprowisedVerified publisher3.3.01 of 3See more

erpnext improwised 3.3.0

1 of the 3 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
improwised/erpnext-worker:v13.4.197280b55cbd4
requests@2.25.1
2.33.0

Open the chart page →

6,502
freeipaimprowisedVerified publisher0.4.11 of 1See more

freeipa improwised 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
freeipa/freeipa-server:fedora-37-4.10.1c87d77342bf5
requests@2.28.1
2.33.0

Open the chart page →

1,219
frigateimprowisedVerified publisher1.1.01 of 1See more

frigate improwised 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.13.07a5244e4c8dc
requests@2.31.0
2.33.0

Open the chart page →

2,159
healthchecksimprowisedVerified publisher1.1.11 of 2See more

healthchecks improwised 1.1.1

1 of the 2 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
linuxserver/healthchecks:2.7.2023033194696dab3c50
requests@2.28.2
2.33.0

Open the chart page →

2,629
impulseimpulse1.0.161 of 1See more

impulse impulse 1.0.16

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/eslupmi/impulse:v3.7.03ded1b7ebca0
requests@2.32.5
2.33.0

Open the chart page →

1,371
guardrails-usvcinfracloud-chartsVerified publisher1.0.11 of 1See more

guardrails-usvc infracloud-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
opea/guardrails-tgi:latestf68bec6a1271
requests@2.32.3
2.33.0

Open the chart page →

5,080
label-studioinseefrlab2.3.11 of 3See more

label-studio inseefrlab 2.3.1

1 of the 3 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
heartexlabs/label-studio:latestaa461572e8f9
requests@2.32.4
2.33.0

Open the chart page →

3,157
redashinseefrlab2.1.01 of 3See more

redash inseefrlab 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
redash/redash:10.0.0.b503639392753c0376
requests@2.21.0
2.33.0

Open the chart page →

3,314
gmaintelVerified publisher0.1.01 of 1See more

gma intel 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
python-pip@20.0.2-5ubuntu1.6
no fix listed

Open the chart page →

7,716
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
requests@2.22.0
python-pip@20.0.2-5ubuntu1.6
requests@2.22.0-2ubuntu1
2.33.0
no fix listed
no fix listed

Open the chart page →

18,155
map5gintelVerified publisher1.0.01 of 1See more

map5g intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
python-pip@20.0.2-5ubuntu1.6
no fix listed

Open the chart page →

7,716
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
requests@2.26.0
2.33.0

Open the chart page →

7,234
istio-bookinfoistio-bookinfo1.2.21 of 6See more

istio-bookinfo istio-bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
requests@2.21.0
2.33.0

Open the chart page →

19,006
wjh-rechnerit-at-mOfficialVerified publisher1.0.41 of 1See more

wjh-rechner it-at-m 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
requests@2.25.1
2.33.0

Open the chart page →

3,501
twitch-channel-points-minerjacobcolvinVerified publisher0.1.01 of 1See more

twitch-channel-points-miner jacobcolvin 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
rdavidoff/twitch-channel-points-miner-v2:1.8.67ae4c5135771
requests@2.31.0
2.33.0

Open the chart page →

1,088
kweather-chartjamoos0.1.01 of 1See more

kweather-chart jamoos 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
jamoos/kweather:history163e2e8a6e87
requests@2.32.3
2.33.0

Open the chart page →

607
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
requests@2.28.1+dfsg-1
requests@2.28.1
no fix listed
2.33.0

Open the chart page →

10,864
13ftjeffrescVerified publisher0.2.01 of 1See more

13ft jeffresc 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/wasi-master/13ft:0.3.4563ce7794a71
requests@2.32.3
2.33.0

Open the chart page →

887
jx-app-anchorejenkins-x0.0.41 of 2See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.7.1ed9b3badd17c
requests@2.23.0
2.33.0

Open the chart page →

9,854
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
requests@2.27.1
2.33.0

Open the chart page →

4,052
homebridgejespernohrVerified publisher0.2.01 of 1See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed

Open the chart page →

2,215
shynetjuniorjpdj0.1.301 of 1See more

shynet juniorjpdj 0.1.30

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.13.1ba54f7797a6b
requests@2.31.0
2.33.0

Open the chart page →

2,581
bazarrk8s-home-lab-repo11.3.21 of 1See more

bazarr k8s-home-lab-repo 11.3.2

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/home-operations/bazarr:1.5.680cb090162b4
requests@2.32.3
2.33.0

Open the chart page →

1,795
beetsk8s-home-lab-repo3.1.11 of 1See more

beets k8s-home-lab-repo 3.1.1

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
requests@2.32.3
2.33.0

Open the chart page →

2,738
flaresolverrk8s-home-lab-repo6.2.01 of 1See more

flaresolverr k8s-home-lab-repo 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
requests@2.32.5
2.33.0

Open the chart page →

27,554
frigatek8s-home-lab-repo9.1.11 of 1See more

frigate k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.11.18330b0a265b8
requests@2.27.1
2.33.0

Open the chart page →

2,370
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
requests@2.32.5
2.33.0

Open the chart page →

9,135
youtubedl-materialk8s-home-lab-repo5.1.11 of 1See more

youtubedl-material k8s-home-lab-repo 5.1.1

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.3.22f943d584711
python-pip@22.0.2+dfsg-1ubuntu0.2
no fix listed

Open the chart page →

9,835
netio-exporterk8sonlabVerified publisher0.1.101 of 1See more

netio-exporter k8sonlab 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
tomsajan/netio-exporter:0.0.5fb61907707b8
requests@2.31.0
2.33.0

Open the chart page →

728
authentikkagiso-me0.1.11 of 1See more

authentik kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
requests@2.32.5
2.33.0

Open the chart page →

4,591
karbkarbVerified publisher1.0.31 of 1See more

karb karb 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/xeor/karb:main647a3c938d31
requests@2.32.5
2.33.0

Open the chart page →

632
karb-chartkarbVerified publisher1.0.61 of 1See more

karb-chart karb 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/xeor/karb:1.0.6647a3c938d31
requests@2.32.5
2.33.0

Open the chart page →

632
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
requests@2.27.1
python-pip@20.0.2-5ubuntu1.6
2.33.0
no fix listed

Open the chart page →

16,484
mlflowkelvins0.4.01 of 3See more

mlflow kelvins 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
kelvinsp/mlflow:1.26.1cd33e6db2a59
requests@2.27.1
2.33.0

Open the chart page →

4,156
allurekfirfer0.1.81 of 2See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.21.08a4d7e9308de
requests@2.23.0
python-pip@9.0.1-2.3~ubuntu1.18.04.6
2.33.0
no fix listed

Open the chart page →

12,538
elastalert2kfirfer2.2.51 of 1See more

elastalert2 kfirfer 2.2.5

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
jertel/elastalert2:2.2.34dcc0ef93efc
requests@2.26.0
2.33.0

Open the chart page →

1,599
elasticsearch-cacherkfirfer0.0.21 of 1See more

elasticsearch-cacher kfirfer 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
kfirfer/elasticsearch-cacher:0.0.1cf81d0959256
requests@2.31.0
2.33.0

Open the chart page →

678
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
requests@2.31.0
2.33.0

Open the chart page →

6,447
kibana-index-pattern-updaterkfirfer0.0.31 of 1See more

kibana-index-pattern-updater kfirfer 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
kfirfer/kibana-index-pattern-updater:1.0.12e88cfcec5c93
requests@2.25.1
2.33.0

Open the chart page →

3,357
kube-hunterkfirfer1.0.51 of 1See more

kube-hunter kfirfer 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
aquasec/kube-hunter:0.6.8e64fe49f059f
requests@2.27.1
2.33.0

Open the chart page →

997
scriptskfirfer0.1.361 of 1See more

scripts kfirfer 0.1.36

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
kfirfer/scripts:0.0.2481e5c4e5d70e
requests@2.26.0
2.33.0

Open the chart page →

2,320
slackgptkfirfer0.0.61 of 1See more

slackgpt kfirfer 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
kfirfer/slackgpt:0.0.15461331bd838e
requests@2.31.0
2.33.0

Open the chart page →

1,125
graphiti-mcpkiberonlabs0.1.21 of 1See more

graphiti-mcp kiberonlabs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
requests@2.32.4
2.33.0

Open the chart page →

3,410
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
python-pip@9.0.1-2.3~ubuntu1
no fix listed

Open the chart page →

14,846
kubeflowkromanow94-kubeflow0.5.15 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

5 of the 30 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
kserve/models-web-app:v0.13.073486345a602
requests@2.32.3
2.33.0
kubeflownotebookswg/jupyter-web-app:v1.9.2afb52057c997
requests@2.32.3
2.33.0
kubeflownotebookswg/tensorboards-web-app:v1.9.277f07f52a84a
requests@2.32.3
2.33.0
kubeflownotebookswg/volumes-web-app:v1.9.2f63c3e550af3
requests@2.32.3
2.33.0
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
requests@2.31.0
2.33.0

Open the chart page →

70,968
lnbitskronkltdVerified publisher0.1.01 of 1See more

lnbits kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:latest26fae6327477
requests@2.31.0
2.33.0

Open the chart page →

1,444
specter-desktopkronkltdVerified publisher0.1.01 of 1See more

specter-desktop kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
lncm/specter-desktop:v0.10.4bca14d04397d
requests@2.25.0
2.33.0

Open the chart page →

1,850
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
requests@2.32.3
2.33.0

Open the chart page →

8,478
jupyterhubkubeblocksVerified publisher0.1.02 of 7See more

jupyterhub kubeblocks 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
requests@2.31.0
2.33.0
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
requests@2.31.0
2.33.0

Open the chart page →

7,357

Container images carrying it

918 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
requests@2.32.3
2.33.0
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
requests@2.25.1
2.33.0
1
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
requests@2.32.4
2.33.0
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
requests@2.20.0
2.33.0
1
quay.io/stackgres/operator:1.19.1f241b0b20326
requests@2.32.3
2.33.0
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
requests@2.32.4
python-pip@24.0+dfsg-1ubuntu1.3
2.33.0
no fix listed
1
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
requests@2.32.5
2.33.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
requests@2.20.0
2.33.0
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
python-pip@20.0.2-5ubuntu1.1
no fix listed
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
requests@2.26.0
2.33.0
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
requests@2.26.0
2.33.0
1
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
requests@2.31.0
2.33.0
1
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
requests@2.32.4
2.33.0
1
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
requests@2.25.1
2.33.0
1
registry.gitlab.com/xrow-public/helm-mssql/mssql:1.10.3f923d842bc47
requests@2.32.4
2.33.0
1
registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.91.3ed44d81a65de
requests@2.32.4
2.33.0
1
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
requests@2.32.5
2.33.0
1
registry.gitlab.com/xrow-public/velero-client/velero-client:1.4.203015f863a3e
requests@2.32.4
2.33.0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.