CVE-2026-25645

Medium

Advisory

Published 25 Mar 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.002; 8th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 860; of 17,787 indexed, latest versions
Container images: 911; deployed by those charts
Fix available: 3 of 5; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 860 of 17,787 indexed charts deploy, on 911 images.

Affected package	Affected versions	Fixed in	Images
requestspypi	2.2.1, 2.6.0, 2.9.1, 2.10.0+27 more	2.33.0	875
requestsdeb	2.2.1-1, 2.2.1-1ubuntu0.3, 2.9.1-3, 2.9.1-3ubuntu0.1+8 more	no fix listed	72
py3-requestsapk	2.32.3-r0, 2.32.4-r0, 2.32.5-r0	2.33.1-r0	7
python-pipdeb	1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+22 more	no fix listed	106
py3-pipapk	25.0.1-r0, 25.2-r0, 26.0.1-r1	26.1.1-r0	3

OSV records: ALPINE-CVE-2026-25645 CGA-8rh8-wj4q-c4fx CGA-p6r3-cg4x-wxcm DEBIAN-CVE-2026-25645 PYSEC-2026-2275 UBUNTU-CVE-2026-25645
Also known as: CGA-hq6f-pr48-q7w8, CGA-wfp2-2xhv-mx6w, GHSA-gc5v-m9x4-r6x2

Charts affected

860 by stars

Chart

Latest

Affected images

Radar Score

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-25645.

Container image	Digest	Package	Fixed in
datawire/emissary :3.12.2	1f67a1292d2a	requests@2.31.0	2.33.0

Open the chart page →

10,843

juicefs-csi-driverwenerme

0.32.5

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-25645.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	requests@2.28.1+dfsg-1 requests@2.28.1	no fix listed 2.33.0

Open the chart page →

9,117

ceph-csi-cephfswikimedia

0.1.8

1 of 5 See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2026-25645.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	requests@2.20.0	2.33.0

Open the chart page →

10,285

ceph-csi-rbdwikimedia

0.1.13

1 of 6 See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2026-25645.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	requests@2.20.0	2.33.0

Open the chart page →

11,784

docker-hub-rate-limit-exporterwiremind

0.3.0

1 of 1 See more

docker-hub-rate-limit-exporter wiremind 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container image	Digest	Package	Fixed in
viadee/docker-hub-rate-limit-exporter :version-1.5	2e27e3b3ee56	requests@2.25.1	2.33.0

Open the chart page →

1,843

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	requests@2.31.0	2.33.0

Open the chart page →

5,542

powerdnsadminwitcom-gmbh

0.3.4

1 of 1 See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container image	Digest	Package	Fixed in
ngoduykhanh/powerdns-admin :v0.2.4	ba36ab196d3d	requests@2.24.0	2.33.0

Open the chart page →

2,643

xkopsxkops

0.1.0

2 of 5 See more

xkops xkops 0.1.0

2 of the 5 container images this version deploys carry CVE-2026-25645.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	requests@2.32.3	2.33.0
hamzaarshad10/querypodpy :1.7	154f38e8668e	requests@2.32.3	2.33.0

Open the chart page →

13,677

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2026-25645.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	requests@2.28.2	2.33.0

Open the chart page →

1,838

zerossl-cert-managerzerossl-cert-manager

0.1.0

1 of 2 See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-25645.

Container image	Digest	Package	Fixed in
andreymileshin/zerossl-issuer :v1.0.0	e0825acc9e48	requests@2.32.3	2.33.0

Open the chart page →

570

Container images carrying it

911 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
bnjbvr/kresus :0.22.1	37e216b182c8	requests@2.32.3	2.33.0	1
boky/postfix :5.1.0	aafc77238423	requests@2.32.5	2.33.0	1
bootc/puppetboard :1.1.0	f1383295e7be	requests@2.23.0	2.33.0	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	requests@2.22.0 requests@2.22.0-2ubuntu1	2.33.0 no fix listed	1
buildkite/agent :3.25.0	aec38cfaae0e	requests@2.20.1	2.33.0	1
buntha/mlflow :2.1.1	154542cc3083	requests@2.28.1	2.33.0	1
camerahub/camerahub :0.36.23	a5af37dd6e1b	requests@2.29.0	2.33.0	1
camptocamp/bucket-cloner :latest	acfafc308d88	requests@2.26.0	2.33.0	1
camptocamp/ekorre :0.1.0	35c91d5fda04	requests@2.23.0	2.33.0	1
camptocamp/pghoard :10	bff736b15623	requests@2.20.0	2.33.0	1
camptocamp/snow-webhook :latest	2924b43dbf40	requests@2.21.0	2.33.0	1
castai/hibernate :v0.14	da62858c8381	requests@2.32.5	2.33.0	1
cdignam/kodiak :v0.54.0	5a6a55b39cee	requests@2.28.1	2.33.0	1
ceph/daemon :latest-nautilus	90f30824a96e	requests@2.6.0	2.33.0	1
checkmk/check-mk-community :2.5.0p6	c11b422210c4	requests@2.32.5	2.33.0	1
chetangautamm/repo :sipp.v3	e7f7049e1544	requests@2.22.0 requests@2.22.0-2ubuntu1	2.33.0 no fix listed	1
chiefonboarding/chiefonboarding :v2.4.1	59bc7aa60fe7	requests@2.32.5	2.33.0	1
chubaofs/cfs-client :3.2.0	15ff74209ce7	requests@2.27.1	2.33.0	1
chubaofs/cfs-server :3.2.0	205030e045f2	requests@2.27.1	2.33.0	1
citizenstig/httpbin :latest	b81c818ccb86	python-pip@8.1.1-2ubuntu0.4	no fix listed	1
ciuse99/suggestarr :v1.0.20	d72768245ef5	requests@2.32.3	2.33.0	1
ckan/ckan-base-datapusher :0.0.21	84d11924549f	requests@2.27.1	2.33.0	1
cleveritcz/opencve :1.5.0	c75c1636e0b7	requests@2.23.0	2.33.0	1
cloudve/janis-terminal :latest	af56e77ca587	requests@2.23.0 python-pip@9.0.1-2.3~ubuntu1.18.04.1	2.33.0 no fix listed	1
cloudve/ttyd :latest	d79c1c5881c0	requests@2.23.0	2.33.0	1
clowder/clowder2-backend :2.0.0-beta.4	11f3d844e4c0	requests@2.28.2	2.33.0	1
clowder/clowder2-heartbeat :2.0.0-beta.4	14155326c7b9	requests@2.28.2	2.33.0	1
clowder/clowder2-messages :2.0.0-beta.4	bf146f1ca24f	requests@2.28.2	2.33.0	1
codaprotocol/buildkite-exporter :0.2.1	37c68e67a401	requests@2.25.1	2.33.0	1
codaprotocol/coda-user-agent :0.1.5	4ba4dd3a041f	requests@2.23.0	2.33.0	1
codecov/self-hosted-api :24.4.1	0475cb1c3136	requests@2.31.0	2.33.0	1
codecov/self-hosted-worker :24.4.1	837f546b479b	requests@2.31.0	2.33.0	1
confluentinc/cp-enterprise-control-center :6.1.0	f2975d507a2a	requests@2.25.0	2.33.0	1
confluentinc/cp-enterprise-kafka :6.1.0	8f1544df1f48	requests@2.25.0	2.33.0	1
confluentinc/cp-kafka :5.4.0	1bbda887bc53	requests@2.11.1	2.33.0	1
confluentinc/cp-kafka :7.1.2.amd64	3bf359d5e340	requests@2.27.1	2.33.0	1
confluentinc/cp-kafka :7.6.6	83dbca3efd2a	requests@2.32.3	2.33.0	1
confluentinc/cp-kafka :7.8.0-3-ubi8	adc392d28a1e	requests@2.32.3	2.33.0	1
confluentinc/cp-kafka :7.4.4	c0224a1adf7a	requests@2.31.0	2.33.0	1
confluentinc/cp-kafka :5.0.1	c87b1c07fb53	requests@2.11.1	2.33.0	1
confluentinc/cp-kafka :7.5.1	dc9b972db002	requests@2.31.0	2.33.0	1
confluentinc/cp-kafka-connect :6.1.0	4bc70a83ca6f	requests@2.25.0	2.33.0	1
confluentinc/cp-kafka-rest :6.1.0	b0b7aa26254a	requests@2.25.0	2.33.0	1
confluentinc/cp-ksqldb-server :7.6.0	8ec46c27982f	requests@2.31.0	2.33.0	1
confluentinc/cp-ksqldb-server :6.1.0	ee403d5b9090	requests@2.25.0	2.33.0	1
confluentinc/cp-schema-registry :6.1.0	b651d4b6185a	requests@2.25.0	2.33.0	1
confluentinc/cp-zookeeper :7.5.1	0bec03c1f3ce	requests@2.31.0	2.33.0	1
confluentinc/cp-zookeeper :7.8.0-3-ubi8	5ca5f3269814	requests@2.32.3	2.33.0	1
confluentinc/cp-zookeeper :6.1.0	78c190f4472c	requests@2.25.0	2.33.0	1
countly/countly-server :25.05.4	e3c238248f99	requests@2.22.0 requests@2.22.0-2ubuntu1	2.33.0 no fix listed	1