CVE-2026-25645

Medium

Advisory

Published 25 Mar 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.002; 8th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 860; of 17,787 indexed, latest versions
Container images: 911; deployed by those charts
Fix available: 3 of 5; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 860 of 17,787 indexed charts deploy, on 911 images.

Affected package	Affected versions	Fixed in	Images
requestspypi	2.2.1, 2.6.0, 2.9.1, 2.10.0+27 more	2.33.0	875
requestsdeb	2.2.1-1, 2.2.1-1ubuntu0.3, 2.9.1-3, 2.9.1-3ubuntu0.1+8 more	no fix listed	72
py3-requestsapk	2.32.3-r0, 2.32.4-r0, 2.32.5-r0	2.33.1-r0	7
python-pipdeb	1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+22 more	no fix listed	106
py3-pipapk	25.0.1-r0, 25.2-r0, 26.0.1-r1	26.1.1-r0	3

OSV records: ALPINE-CVE-2026-25645 CGA-8rh8-wj4q-c4fx CGA-p6r3-cg4x-wxcm DEBIAN-CVE-2026-25645 PYSEC-2026-2275 UBUNTU-CVE-2026-25645
Also known as: CGA-hq6f-pr48-q7w8, CGA-wfp2-2xhv-mx6w, GHSA-gc5v-m9x4-r6x2

Charts affected

860 by stars

Chart

Latest

Affected images

Radar Score

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-25645.

Container image	Digest	Package	Fixed in
datawire/emissary :3.12.2	1f67a1292d2a	requests@2.31.0	2.33.0

Open the chart page →

10,843

juicefs-csi-driverwenerme

0.32.5

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-25645.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	requests@2.28.1+dfsg-1 requests@2.28.1	no fix listed 2.33.0

Open the chart page →

9,117

ceph-csi-cephfswikimedia

0.1.8

1 of 5 See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2026-25645.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	requests@2.20.0	2.33.0

Open the chart page →

10,285

ceph-csi-rbdwikimedia

0.1.13

1 of 6 See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2026-25645.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	requests@2.20.0	2.33.0

Open the chart page →

11,784

docker-hub-rate-limit-exporterwiremind

0.3.0

1 of 1 See more

docker-hub-rate-limit-exporter wiremind 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container image	Digest	Package	Fixed in
viadee/docker-hub-rate-limit-exporter :version-1.5	2e27e3b3ee56	requests@2.25.1	2.33.0

Open the chart page →

1,843

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	requests@2.31.0	2.33.0

Open the chart page →

5,542

powerdnsadminwitcom-gmbh

0.3.4

1 of 1 See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-25645.

Container image	Digest	Package	Fixed in
ngoduykhanh/powerdns-admin :v0.2.4	ba36ab196d3d	requests@2.24.0	2.33.0

Open the chart page →

2,643

xkopsxkops

0.1.0

2 of 5 See more

xkops xkops 0.1.0

2 of the 5 container images this version deploys carry CVE-2026-25645.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	requests@2.32.3	2.33.0
hamzaarshad10/querypodpy :1.7	154f38e8668e	requests@2.32.3	2.33.0

Open the chart page →

13,677

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2026-25645.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	requests@2.28.2	2.33.0

Open the chart page →

1,838

zerossl-cert-managerzerossl-cert-manager

0.1.0

1 of 2 See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-25645.

Container image	Digest	Package	Fixed in
andreymileshin/zerossl-issuer :v1.0.0	e0825acc9e48	requests@2.32.3	2.33.0

Open the chart page →

570

Container images carrying it

911 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/kiwigrid/k8s-sidecar :2.5.0	a6b3f707f883	requests@2.32.5	2.33.0	13
oomk8s/readiness-check :2.0.2	875814cc853d	requests@2.21.0 python-pip@8.1.1-2ubuntu0.4	2.33.0 no fix listed	11
quay.io/openshift/origin-cli :latest	605eaa5d469c	requests@2.32.4	2.33.0	7
oomk8s/readiness-check :2.0.0	7daa08b81954	requests@2.18.4 python-pip@8.1.1-2ubuntu0.4	2.33.0 no fix listed	6
flaresolverr/flaresolverr :latest :v3.5.0	139dfee1c6f8	requests@2.32.5	2.33.0	5
opea/llm-tgi :1.0	0c25aab3f106	requests@2.32.3	2.33.0	4
shashkist/flask-contacts-app :latest	581de1fd6084	requests@2.32.3	2.33.0	4
apache/superset :6.1.0 :latest	16b50bbef664	requests@2.32.4	2.33.0	3
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	requests@2.26.0 python-pip@20.0.2-5ubuntu1.6	2.33.0 no fix listed	3
dnationcloud/kubernetes-jsonnet-translator :2.0.1	78fed4f3c130	requests@2.32.4	2.33.0	3
dpage/pgadmin4 :6.12	781369df9994	requests@2.26.0	2.33.0	3
kiwigrid/k8s-sidecar :0.1.193	170069ff0976	requests@2.22.0	2.33.0	3
kiwigrid/k8s-sidecar :1.28.0	4166a019eeaf	requests@2.32.3	2.33.0	3
kiwigrid/k8s-sidecar :0.1.151	7b98eecdf6d1	requests@2.22.0	2.33.0	3
kiwigrid/k8s-sidecar :1.30.2	cdb361e67b1b	requests@2.32.3	2.33.0	3
quay.io/devtron/ai-agent :0.0.1	6545dac92173	requests@2.32.3	2.33.0	3
quay.io/kiwigrid/k8s-sidecar :1.14.2	35654389f8a9	requests@2.25.1	2.33.0	3
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	requests@2.20.0	2.33.0	3
amancevice/superset :0.35.2	12a0a9e66550	requests@2.22.0	2.33.0	2
aquasec/kube-hunter :0.6.8	e64fe49f059f	requests@2.27.1	2.33.0	2
blakeblackshear/frigate :0.11.1	8330b0a265b8	requests@2.27.1	2.33.0	2
confluentinc/cp-kafka :6.2.11-1-ubi8	ac776fad95a5	requests@2.31.0	2.33.0	2
confluentinc/cp-zookeeper :latest	7610a50b13e7	requests@2.32.3	2.33.0	2
confluentinc/cp-zookeeper :6.2.11-1-ubi8	cae577096489	requests@2.31.0	2.33.0	2
cs3org/wopiserver :v9.4.2	02a9e78757b4	requests@2.28.2	2.33.0	2
datawire/aes :1.14.4	8588eafe6862	requests@2.25.1	2.33.0	2
gisaia/agate :0.18.1	98213fa403ae	requests@2.32.4	2.33.0	2
gisaia/airs :0.18.1	5abfe00317bf	requests@2.32.4	2.33.0	2
gisaia/aproc-service :0.18.1	ac6564921994	requests@2.32.4	2.33.0	2
gisaia/fam :0.18.1	ae525930b4b6	requests@2.32.4	2.33.0	2
hjacobs/kube-downscaler :23.2.0-6-gc9b88e8	4b2147f47425	requests@2.31.0	2.33.0	2
hjacobs/kube-ops-view :20.4.0	58221b57d4d2	requests@2.23.0	2.33.0	2
homebridge/homebridge :latest	77c685a40911	python-pip@24.0+dfsg-1ubuntu1.3	no fix listed	2
istio/examples-bookinfo-productpage-v1 :1.15.0	0a5eb4795952	requests@2.21.0	2.33.0	2
istio/examples-bookinfo-productpage-v1 :1.14.0	22a0410f35a8	requests@2.21.0	2.33.0	2
kiwigrid/k8s-sidecar :1.24.4	4138bea678f0	requests@2.31.0	2.33.0	2
kiwigrid/k8s-sidecar :1.24.3	5af76eebbba7	requests@2.29.0	2.33.0	2
kiwigrid/k8s-sidecar :1.30.9	8c06e1ba643a	requests@2.32.4	2.33.0	2
langgenius/dify-sandbox :0.2.0	09b7e8705673	requests@2.31.0	2.33.0	2
larribas/mlflow :1.9.1	05ccb0b46bfb	requests@2.24.0	2.33.0	2
lncm/specter-desktop :v1.10.5	36eaa06f99f4	requests@2.26.0	2.33.0	2
locustio/locust :2.32.2	a0d4b88e42c1	requests@2.32.3	2.33.0	2
louislam/uptime-kuma :2.5.4	917318f9d7be	requests@2.28.1+dfsg-1 requests@2.28.1	no fix listed 2.33.0	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	requests@2.28.1+dfsg-1 requests@2.28.1	no fix listed 2.33.0	2
louislam/uptime-kuma :2.5.0	a8610b3b4c38	requests@2.28.1+dfsg-1 requests@2.28.1	no fix listed 2.33.0	2
neuvector/manager :3.2.1	f1b7d666eae0	requests@2.22.0	2.33.0	2
ngoduykhanh/powerdns-admin :v0.2.4	ba36ab196d3d	requests@2.24.0	2.33.0	2
omecproject/kubernetes-synchronizer :comac-1.0.0	7c17a7b1d1ef	requests@2.22.0	2.33.0	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	requests@2.18.4 python-pip@8.1.1-2ubuntu0.4	2.33.0 no fix listed	2
opea/embedding-tei :1.0	5c9639de61c1	requests@2.32.3	2.33.0	2