StackRadar

CVE-2026-25645

Medium

Advisory

Published 25 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
870
of 17,787 indexed, latest versions
Container images
920
deployed by those charts
Fix available
3 of 5
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 870 of 17,787 indexed charts deploy, on 920 images.

Affected packageAffected versionsFixed inImages
requestspypi2.2.1, 2.6.0, 2.9.1, 2.10.0+27 more2.33.0882
requestsdeb2.2.1-1, 2.2.1-1ubuntu0.3, 2.9.1-3, 2.9.1-3ubuntu0.1+8 moreno fix listed72
py3-requestsapk2.32.3-r0, 2.32.4-r0, 2.32.5-r02.33.1-r07
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+23 moreno fix listed108
py3-pipapk25.0.1-r0, 25.2-r0, 26.0.1-r126.1.1-r03
OSV records
ALPINE-CVE-2026-25645CGA-8rh8-wj4q-c4fxCGA-p6r3-cg4x-wxcmDEBIAN-CVE-2026-25645PYSEC-2026-2275UBUNTU-CVE-2026-25645
Also known as
CGA-hq6f-pr48-q7w8, CGA-wfp2-2xhv-mx6w, GHSA-gc5v-m9x4-r6x2

Charts affected

870 by stars
ChartLatestAffected imagesRadar Score
jupyterhubkubeblocksVerified publisher0.1.02 of 7See more

jupyterhub kubeblocks 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
requests@2.31.0
2.33.0
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
requests@2.31.0
2.33.0

Open the chart page →

7,356
lokikubeblocksVerified publisher5.39.01 of 5See more

loki kubeblocks 5.39.0

1 of the 5 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.24.35af76eebbba7
requests@2.29.0
2.33.0

Open the chart page →

5,841
smartfs-csi-driverkubeblocksVerified publisher0.1.21 of 6See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
requests@2.20.0
2.33.0

Open the chart page →

9,249
cephfs-csikubegems1.0.81 of 6See more

cephfs-csi kubegems 1.0.8

1 of the 6 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.5.128a674af1df2
requests@2.20.0
2.33.0

Open the chart page →

4,445
juicefs-csi-driverkubegems0.19.21 of 6See more

juicefs-csi-driver kubegems 0.19.2

1 of the 6 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.23.0d915e899e322
requests@2.25.1
2.33.0

Open the chart page →

4,825
juicefs-tenantkubegems1.0.11 of 3See more

juicefs-tenant kubegems 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
kubegems/juicefs-mount:ce-v1.1.010abb76892b8
requests@2.21.0
2.33.0

Open the chart page →

4,120
kube-infokube-info0.1.01 of 1See more

kube-info kube-info 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
andreymileshin/kube-info:v0.1.0f7b300bc9e66
requests@2.32.3
2.33.0

Open the chart page →

518
kube-janitorkube-janitor0.3.31 of 1See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
hjacobs/kube-janitor:23.7.0fbb303ed463c
requests@2.31.0
2.33.0

Open the chart page →

3,700
kube-pod-alertskube-pod-alertsVerified publisher0.1.81 of 1See more

kube-pod-alerts kube-pod-alerts 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
tussanakorndev/kube-pod-alerts:1.0.5216fdadadf9a
requests@2.32.4
2.33.0

Open the chart page →

1,639
flaresolverrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

flaresolverr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
requests@2.32.5
2.33.0

Open the chart page →

33,591
pve-exporterkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

pve-exporter kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:3.8.2e3d501a82df5
requests@2.32.5
2.33.0

Open the chart page →

994
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
requests@2.28.1+dfsg-1
requests@2.28.1
no fix listed
2.33.0

Open the chart page →

6,363
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
requests@2.22.0
2.33.0

Open the chart page →

18,394
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
python-pip@20.0.2-5ubuntu1.5
no fix listed

Open the chart page →

14,368
online-boutiquekubesphere-testVerified publisher0.1.02 of 11See more

online-boutique kubesphere-test 0.1.0

2 of the 11 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3360130ab5850
requests@2.24.0
2.33.0
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
requests@2.24.0
2.33.0

Open the chart page →

26,019
rbd-provisionerkubesphere-testVerified publisher0.1.11 of 1See more

rbd-provisioner kubesphere-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
kubesphere/rbd-provisioner:v2.1.1-k8s1.11b8ad79759bcd
requests@2.6.0
2.33.0

Open the chart page →

242
sample-bookinfokubesphere-testVerified publisher1.0.01 of 4See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
kubesphere/examples-bookinfo-productpage-v1:1.13.0378f49ec9c44
requests@2.20.0
2.33.0

Open the chart page →

9,384
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/sdk-py:v1.20.0f108f49570cc
requests@2.32.3
2.33.0

Open the chart page →

20,299
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
python-pip@22.0.2+dfsg-1ubuntu0.5
no fix listed

Open the chart page →

6,879
kyso-nbdimekyso1.0.01 of 1See more

kyso-nbdime kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
kyso/kyso-nbdime:latest4aa9d38ee81d
requests@2.28.1
2.33.0

Open the chart page →

2,765
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed

Open the chart page →

2,203
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
requests@2.28.1+dfsg-1
requests@2.28.1
no fix listed
2.33.0

Open the chart page →

32,893
jenkinsleechistest2.7.11 of 2See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.193170069ff0976
requests@2.22.0
2.33.0

Open the chart page →

4,434
legendlegend0.1.21 of 1See more

legend legend 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/grofers/legend:0.1d6e901ad0ebd
requests@2.22.0
2.33.0

Open the chart page →

4,067
owntracks-exporterleprechaun-charts0.1.111 of 1See more

owntracks-exporter leprechaun-charts 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
requests@2.31.0
2.33.0

Open the chart page →

3,448
neuvectorlifen-chartsVerified publisher1.5.21 of 3See more

neuvector lifen-charts 1.5.2

1 of the 3 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
neuvector/manager:3.2.1f1b7d666eae0
requests@2.22.0
2.33.0

Open the chart page →

2,747
lightlyticslightlytics0.1.212 of 2See more

lightlytics lightlytics 0.1.21

2 of the 2 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
public.ecr.aws/k6v9y5g3/cluster-agent:master.57536d051110158
requests@2.32.3
2.33.0
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
requests@2.32.3
2.33.0

Open the chart page →

5,130
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
requests@2.32.4
2.33.0

Open the chart page →

37,518
calendar-apiliturgical0.1.51 of 1See more

calendar-api liturgical 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/liturgical-app/calendar-api:0.0.9688a685e2bde
requests@2.32.5
2.33.0

Open the chart page →

1,557
liturgical-appliturgical0.9.01 of 1See more

liturgical-app liturgical 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/liturgical-app/liturgical-app:1.2.041f25aded572
requests@2.32.5
2.33.0

Open the chart page →

953
llmarinerllmariner1.53.11 of 21See more

llmariner llmariner 1.53.1

1 of the 21 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
requests@2.32.5
2.33.0

Open the chart page →

12,034
llm-dllm-dVerified publisher1.0.231 of 2See more

llm-d llm-d 1.0.23

1 of the 2 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/llm-d/llm-d-model-service:v0.0.158b99a8104a2f
requests@2.25.1
2.33.0

Open the chart page →

2,524
lnbitslnbits0.2.11 of 1See more

lnbits lnbits 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
requests@2.27.1
2.33.0

Open the chart page →

1,949
local-businesslocal-business0.1.01 of 1See more

local-business local-business 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
alakaganaguathoork/local-business:latest7eb27b0f4a5a
requests@2.32.5
2.33.0

Open the chart page →

947
weather-app-chartlocal-weatherapp0.1.01 of 4See more

weather-app-chart local-weatherapp 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
youssef11gaber10/deployment-weather-flask:latest96bce8b8b5a7
requests@2.26.0
2.33.0

Open the chart page →

5,905
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
locustio/locust:2.24.151d866285170
requests@2.31.0
2.33.0

Open the chart page →

7,516
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
requests@2.28.1+dfsg-1
requests@2.28.1
no fix listed
2.33.0

Open the chart page →

32,893
nightingalelogic3579Verified publisher0.3.11 of 6See more

nightingale logic3579 0.3.1

1 of the 6 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
flashcatcloud/nightingale:8.5.1421acb36181b
requests@2.32.5
2.33.0

Open the chart page →

9,021
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
logiqai/toolbox:2.0.155a574ec5b64
requests@2.23.0
2.33.0

Open the chart page →

23,255
lsdisklsdiskVerified publisher2.0.71 of 4See more

lsdisk lsdisk 2.0.7

1 of the 4 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
requests@2.32.3
2.33.0

Open the chart page →

5,032
alert-stream-schema-registrylsst-sqre2.1.01 of 1See more

alert-stream-schema-registry lsst-sqre 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
lsstdm/lsst_alert_packet:tickets-DM-3274374c97a490940
requests@2.26.0
2.33.0

Open the chart page →

2,293
nubladolsst-sqre0.9.233 of 5See more

nublado lsst-sqre 0.9.23

3 of the 5 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
lsstsqre/prepuller:latest19c2dfc4e4ff
requests@2.25.1
2.33.0
lsstsqre/sciplat-hub:latest5e0ade6bed1c
requests@2.25.1
2.33.0
lsstsqre/wfdispatcher:lateste9feb99f524d
requests@2.25.1
2.33.0

Open the chart page →

5,787
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
requests@2.27.1
python-pip@20.0.2-5ubuntu1.6
2.33.0
no fix listed

Open the chart page →

17,836
sasquatchlsst-sqre0.1.132 of 6See more

sasquatch lsst-sqre 0.1.13

2 of the 6 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
lsstsqre/kafkaconnect:0.9.34143c7cd705e
requests@2.26.0
2.33.0
lsstsqre/strimzi-registry-operator:0.4.1e139fde946d7
requests@2.27.1
2.33.0

Open the chart page →

9,332
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
lsstsqre/squash-api:0.5.34879415ec6ac
requests@2.25.0
2.33.0

Open the chart page →

6,623
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:latest139dfee1c6f8
requests@2.32.5
2.33.0

Open the chart page →

27,282
kube-hunterm9sweeperVerified publisher1.6.01 of 1See more

kube-hunter m9sweeper 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
aquasec/kube-hunter:0.6.8e64fe49f059f
requests@2.27.1
2.33.0

Open the chart page →

997
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
requests@2.31.0
2.33.0

Open the chart page →

6,722
marge-botmarge-bot1.1.01 of 1See more

marge-bot marge-bot 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
smarketshq/marge-bot:0.9.2cfc765b27e64
requests@2.21.0
2.33.0

Open the chart page →

337
marge-botmarge-bot-helm1.3.51 of 1See more

marge-bot marge-bot-helm 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.16.0b59f01bc0418
requests@2.31.0
2.33.0

Open the chart page →

3,541

Container images carrying it

920 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/ortelius/ms-textfile-crud:main-v10.0.1635-g5076aaf5c4c8adfc82
requests@2.32.5
2.33.0
1
quay.io/ortelius/ms-validate-user:main-v10.0.1694-g98ed94b5054bd4e97a
requests@2.32.5
2.33.0
1
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
requests@2.32.3
2.33.0
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
requests@2.25.1
2.33.0
1
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
requests@2.32.4
2.33.0
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
requests@2.20.0
2.33.0
1
quay.io/stackgres/operator:1.19.1f241b0b20326
requests@2.32.3
2.33.0
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
requests@2.32.4
python-pip@24.0+dfsg-1ubuntu1.3
2.33.0
no fix listed
1
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
requests@2.32.5
2.33.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
requests@2.20.0
2.33.0
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
python-pip@20.0.2-5ubuntu1.1
no fix listed
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
requests@2.26.0
2.33.0
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
requests@2.26.0
2.33.0
1
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
requests@2.31.0
2.33.0
1
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
requests@2.32.4
2.33.0
1
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
requests@2.25.1
2.33.0
1
registry.gitlab.com/xrow-public/helm-mssql/mssql:1.10.3f923d842bc47
requests@2.32.4
2.33.0
1
registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.91.3ed44d81a65de
requests@2.32.4
2.33.0
1
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
requests@2.32.5
2.33.0
1
registry.gitlab.com/xrow-public/velero-client/velero-client:1.4.203015f863a3e
requests@2.32.4
2.33.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.