StackRadar

CVE-2026-25645

Medium

Advisory

Published 25 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
865
of 17,790 indexed, latest versions
Container images
913
deployed by those charts
Fix available
3 of 5
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 865 of 17,790 indexed charts deploy, on 913 images.

Affected packageAffected versionsFixed inImages
requestspypi2.2.1, 2.6.0, 2.9.1, 2.10.0+27 more2.33.0877
requestsdeb2.2.1-1, 2.2.1-1ubuntu0.3, 2.9.1-3, 2.9.1-3ubuntu0.1+8 moreno fix listed71
py3-requestsapk2.32.3-r0, 2.32.4-r0, 2.32.5-r02.33.1-r07
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+23 moreno fix listed106
py3-pipapk25.0.1-r0, 25.2-r0, 26.0.1-r126.1.1-r03
OSV records
ALPINE-CVE-2026-25645CGA-8rh8-wj4q-c4fxCGA-p6r3-cg4x-wxcmDEBIAN-CVE-2026-25645PYSEC-2026-2275UBUNTU-CVE-2026-25645
Also known as
CGA-hq6f-pr48-q7w8, CGA-wfp2-2xhv-mx6w, GHSA-gc5v-m9x4-r6x2

Charts affected

865 by stars
ChartLatestAffected imagesRadar Score
sentry-dbsentry0.9.41 of 10See more

sentry-db sentry 0.9.4

1 of the 10 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:5.4.01bbda887bc53
requests@2.11.1
2.33.0

Open the chart page →

10,972
ccx-monitoringseveralnines0.6.211 of 7See more

ccx-monitoring severalnines 0.6.21

1 of the 7 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
requests@2.32.5
2.33.0

Open the chart page →

7,709
first-chartshashkist-test0.1.01 of 3See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
requests@2.32.3
2.33.0

Open the chart page →

2,934
showroom-docs-mcpshowroom-docs-mcpVerified publisher2.1.01 of 4See more

showroom-docs-mcp showroom-docs-mcp 2.1.0

1 of the 4 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
litellm/litellm-non_root:v1.82.3-stable09b217802ded
requests@2.32.5
py3-pip@26.0.1-r1
2.33.0
26.1.1-r0

Open the chart page →

5,230
sibylsibyl0.2.01 of 1See more

sibyl sibyl 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/bensoer/sibyl:v0.2.06dca4455fde3
requests@2.32.5
2.33.0

Open the chart page →

1,020
digdagskyoo20030.5.21 of 4See more

digdag skyoo2003 0.5.2

1 of the 4 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
requests@2.25.1
2.33.0

Open the chart page →

6,950
docker-registryslamdev0.0.41 of 2See more

docker-registry slamdev 0.0.4

1 of the 2 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
hcguersoy/cleanreg:v0.8.063b76fdcfbe1
requests@2.27.1
2.33.0

Open the chart page →

1,949
marge-botslamdev0.0.11 of 1See more

marge-bot slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.11.07235809b43b3
requests@2.25.1
2.33.0

Open the chart page →

1,426
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
requests@2.23.0
2.33.0

Open the chart page →

8,697
frigatesmarthallVerified publisher1.0.61 of 1See more

frigate smarthall 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
requests@2.28.2
2.33.0

Open the chart page →

2,243
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
requests@2.31.0
2.33.0

Open the chart page →

5,571
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
requests@2.21.0
python-pip@8.1.1-2ubuntu0.4
2.33.0
no fix listed

Open the chart page →

25,793
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
requests@2.21.0
python-pip@8.1.1-2ubuntu0.4
2.33.0
no fix listed

Open the chart page →

25,827
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
requests@2.18.4
python-pip@8.1.1-2ubuntu0.4
2.33.0
no fix listed

Open the chart page →

28,494
dmaap-listenersmo-helm-chart6.0.01 of 3See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
requests@2.21.0
python-pip@8.1.1-2ubuntu0.4
2.33.0
no fix listed

Open the chart page →

25,793
elasticsearchsmo-helm-chart6.0.01 of 5See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
requests@2.21.0
python-pip@8.1.1-2ubuntu0.4
2.33.0
no fix listed

Open the chart page →

24,800
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
requests@2.18.4
python-pip@8.1.1-2ubuntu0.4
2.33.0
no fix listed

Open the chart page →

29,244
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
requests@2.21.0
python-pip@8.1.1-2ubuntu0.4
2.33.0
no fix listed

Open the chart page →

24,800
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
requests@2.18.4
python-pip@8.1.1-2ubuntu0.4
2.33.0
no fix listed

Open the chart page →

27,501
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
requests@2.18.4
python-pip@8.1.1-2ubuntu0.4
2.33.0
no fix listed

Open the chart page →

27,501
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
requests@2.18.4
python-pip@8.1.1-2ubuntu0.4
2.33.0
no fix listed

Open the chart page →

29,244
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
requests@2.18.4
python-pip@8.1.1-2ubuntu0.4
2.33.0
no fix listed

Open the chart page →

27,501
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
requests@2.21.0
python-pip@8.1.1-2ubuntu0.4
2.33.0
no fix listed

Open the chart page →

25,793
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
requests@2.21.0
python-pip@8.1.1-2ubuntu0.4
2.33.0
no fix listed

Open the chart page →

25,793
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
requests@2.21.0
python-pip@8.1.1-2ubuntu0.4
2.33.0
no fix listed

Open the chart page →

25,793
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
requests@2.21.0
python-pip@8.1.1-2ubuntu0.4
2.33.0
no fix listed

Open the chart page →

24,800
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
requests@2.21.0
python-pip@8.1.1-2ubuntu0.4
2.33.0
no fix listed

Open the chart page →

24,800
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
requests@2.21.0
python-pip@8.1.1-2ubuntu0.4
2.33.0
no fix listed

Open the chart page →

25,793
smtpsmtpVerified publisher1.3.31 of 1See more

smtp smtp 1.3.3

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
requests@2.32.5
2.33.0

Open the chart page →

1,437
cost-analyzersoftonic2.5.52 of 6See more

cost-analyzer softonic 2.5.5

2 of the 6 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
gcr.io/kubecost1/kubecost-modeling:v0.1.24a2259b098b13
requests@2.32.3
2.33.0
ghcr.io/kiwigrid/k8s-sidecar:1.29.142002d66ddb3
requests@2.32.3
2.33.0

Open the chart page →

7,935
gar-exportersoftonic0.1.11 of 1See more

gar-exporter softonic 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
softonic/gar-exporter:0.2.1a64d6c0e0ae5
requests@2.24.0
2.33.0

Open the chart page →

2,296
kube-prometheus-stacksoftonic81.5.11 of 6See more

kube-prometheus-stack softonic 81.5.1

1 of the 6 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
requests@2.32.5
2.33.0

Open the chart page →

4,975
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
requests@2.22.0
python-pip@20.0.2-5ubuntu1.6
requests@2.22.0-2ubuntu1
2.33.0
no fix listed
no fix listed

Open the chart page →

30,759
ambassador-manifestssqream-chartsVerified publisher0.6.31 of 1See more

ambassador-manifests sqream-charts 0.6.3

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
datawire/aes:3.11.195ec30b3c732
requests@2.31.0
2.33.0

Open the chart page →

2,415
downscalersqream-chartsVerified publisher1.0.01 of 1See more

downscaler sqream-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.05d328c003efe
requests@2.28.1
2.33.0

Open the chart page →

1,009
servicexssl-hep1.8.52 of 16See more

servicex ssl-hep 1.8.5

2 of the 16 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
sslhep/servicex-did-finder:v1.8.5ab0090083567
requests@2.25.1
2.33.0
sslhep/x509-secrets:v1.8.5d9e9ecb12d59
requests@2.25.1
2.33.0

Open the chart page →

65,130
allurestakaterVerified publisher1.0.11 of 1See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
requests@2.20.0
2.33.0

Open the chart page →

28,165
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
requests@2.32.2
2.33.0

Open the chart page →

18,426
horcruxstakewise1.0.11 of 1See more

horcrux stakewise 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
stakewiselabs/bls-horcrux:v1.0.02afd0c0b34cb
requests@2.25.1
2.33.0

Open the chart page →

1,421
open-appsec-injectorstartechnicaVerified publisher1.1.21 of 3See more

open-appsec-injector startechnica 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/openappsec/openappsec-waf-webhook:1.1.345b979b962043
requests@2.32.5
2.33.0

Open the chart page →

4,315
cost-analyzerstatcan1.82.21 of 9See more

cost-analyzer statcan 1.82.2

1 of the 9 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.12.089739be9ff38
requests@2.24.0
2.33.0

Open the chart page →

16,508
datapusherstatcan1.0.01 of 1See more

datapusher statcan 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
keitaro/ckan-datapusher:0.0.175bf1a45f45c1
requests@2.24.0
2.33.0

Open the chart page →

3,044
prometheus-operatorstatcan0.2.21 of 7See more

prometheus-operator statcan 0.2.2

1 of the 7 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.1517b98eecdf6d1
requests@2.22.0
2.33.0

Open the chart page →

12,237
storageclass-routerstorageclass-routerVerified publisher0.4.11 of 1See more

storageclass-router storageclass-router 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
quay.io/maxiv/storageclass-router:0.4.160725dab588c
requests@2.31.0
2.33.0

Open the chart page →

1,057
sn-consolestreamnative1.13.01 of 1See more

sn-console streamnative 1.13.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
streamnative/private-cloud-console:v2.3.27-all91e54375e154
py3-requests@2.32.4-r0
requests@2.32.4
2.33.1-r0
2.33.0

Open the chart page →

1,827
sn-platform-slimstreamnative1.11.441 of 6See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
python-pip@20.0.2-5ubuntu1.10
no fix listed

Open the chart page →

10,182
studygovernorstudy-governorVerified publisher0.1.381 of 3See more

studygovernor study-governor 0.1.38

1 of the 3 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
requests@2.31.0
2.33.0

Open the chart page →

1,447
artifactory-cleanupsubshellVerified publisher1.0.11 of 1See more

artifactory-cleanup subshell 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
devopshq/artifactory-cleanup:1.0.1830e093bffa91
requests@2.32.3
2.33.0

Open the chart page →

2,540
substra-backendsubstraVerified publisher26.15.31 of 7See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-backend:1.0.121967f54ec86
requests@2.31.0
2.33.0

Open the chart page →

4,782
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
requests@2.31.0
2.33.0

Open the chart page →

12,937

Container images carrying it

913 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
requests@2.32.4
python-pip@24.0+dfsg-1ubuntu1.3
2.33.0
no fix listed
1
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
requests@2.32.5
2.33.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
requests@2.20.0
2.33.0
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
python-pip@20.0.2-5ubuntu1.1
no fix listed
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
requests@2.26.0
2.33.0
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
requests@2.26.0
2.33.0
1
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
requests@2.31.0
2.33.0
1
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
requests@2.32.4
2.33.0
1
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
requests@2.25.1
2.33.0
1
registry.gitlab.com/xrow-public/helm-mssql/mssql:1.10.3f923d842bc47
requests@2.32.4
2.33.0
1
registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.91.3ed44d81a65de
requests@2.32.4
2.33.0
1
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
requests@2.32.5
2.33.0
1
registry.gitlab.com/xrow-public/velero-client/velero-client:1.4.203015f863a3e
requests@2.32.4
2.33.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.