StackRadar

CVE-2026-32597

High

Advisory

Published 13 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
19th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
243
of 17,781 indexed, latest versions
Container images
236
deployed by those charts
Fix available
2 of 2
affected packages

PyJWT accepts unknown `crit` header extensions

Carried by container images the latest versions of 243 of 17,781 indexed charts deploy, on 236 images.

Affected packageAffected versionsFixed inImages
pyjwtpypi1.4.2, 1.5.3, 1.6.1, 1.6.4+14 more2.12.0236
pyjwtdeb1.7.1-2ubuntu2.1, 2.3.0-1, 2.3.0-1ubuntu0.2, 2.6.0-1+1 more1.7.1-2ubuntu2.1+esm1, 2.3.0-1ubuntu0.3, 2.6.0-1+deb12u1, 2.7.0-1ubuntu0.118
OSV records
DEBIAN-CVE-2026-32597GHSA-752w-5fwx-jx9fUBUNTU-CVE-2026-32597
Also known as
PYSEC-2026-120, USN-8133-1

Charts affected

243 by stars
ChartLatestAffected imagesRadar Score
games-on-whalesgeek-cookbookVerified publisher1.8.21 of 7See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/xorg:1.0.0305b3327ebba
pyjwt@1.7.1
2.12.0

Open the chart page →

35,305
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
pyjwt@2.3.0
2.12.0

Open the chart page →

7,801
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
pyjwt@1.7.0
2.12.0

Open the chart page →

5,079
IMgrycapOfficialVerified publisher1.8.01 of 3See more

IM grycap 1.8.0

1 of the 3 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
ghcr.io/grycap/im:latest06a16d4f279f
pyjwt@2.10.1
2.12.0

Open the chart page →

4,132
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
pyjwt@1.7.0
2.12.0

Open the chart page →

4,196
helmuphelmupVerified publisher0.1.02 of 3See more

helmup helmup 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
pyjwt@2.8.0
2.12.0
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
pyjwt@2.8.0
2.12.0

Open the chart page →

16,514
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
pyjwt@2.4.0
2.12.0

Open the chart page →

12,397
supersetinseefrlab1.4.01 of 4See more

superset inseefrlab 1.4.0

1 of the 4 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
pyjwt@2.2.0
2.12.0

Open the chart page →

7,129
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
pyjwt@2.4.0
2.12.0

Open the chart page →

11,764
jessejesse-chartVerified publisher0.0.461 of 6See more

jesse jesse-chart 0.0.46

1 of the 6 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
salehmir/jesse:1.10.101afa95f979e9
pyjwt@2.8.0
2.12.0

Open the chart page →

3,421
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
pyjwt@2.8.0
2.12.0

Open the chart page →

20,403
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
pyjwt@2.9.0
2.12.0

Open the chart page →

4,292
medusamedusaVerified publisher1.3.81 of 1See more

medusa medusa 1.3.8

1 of the 1 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
linuxserver/medusa:v1.0.26-ls2884477fb1ce3ca
pyjwt@2.10.1
2.12.0

Open the chart page →

977
mlflow-controllermlflow-deployment-controller0.1.82 of 2See more

mlflow-controller mlflow-deployment-controller 0.1.8

2 of the 2 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
tachyongroup/mlflow-deployment-controller:mlflow-controller-0.1.87e79b9000856
pyjwt@2.6.0
2.12.0
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
pyjwt@2.6.0
2.12.0

Open the chart page →

8,957
mlflow-servermlflowserver0.1.91 of 3See more

mlflow-server mlflowserver 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
buntha/mlflow:2.1.1154542cc3083
pyjwt@2.6.0
2.12.0

Open the chart page →

5,804
helm-taigamvitale1989-helm-taigaVerified publisher0.2.51 of 2See more

helm-taiga mvitale1989-helm-taiga 0.2.5

1 of the 2 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
pyjwt@1.7.1
2.12.0

Open the chart page →

5,104
clowder2ncsaVerified publisher1.9.73 of 12See more

clowder2 ncsa 1.9.7

3 of the 12 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
pyjwt@2.6.0
2.12.0
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
pyjwt@2.6.0
2.12.0
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
pyjwt@2.6.0
2.12.0

Open the chart page →

37,373
open-notificatiesopen-zaak0.7.01 of 4See more

open-notificaties open-zaak 0.7.0

1 of the 4 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
openzaak/open-notificaties:1.3.02e65313b9b10
pyjwt@2.3.0
2.12.0

Open the chart page →

2,850
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
pyjwt@2.6.0-1
pyjwt@2.6.0
2.6.0-1+deb12u1
2.12.0

Open the chart page →

6,883
privacyideaprivacyidea1.0.61 of 2See more

privacyidea privacyidea 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
gpappsoft/privacyidea-docker:3.12.2af7841adad26
pyjwt@2.10.1
2.12.0

Open the chart page →

5,440
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
pyjwt@2.7.0
2.12.0

Open the chart page →

23,964
routehub-client-hubroutehub-helm1.0.01 of 3See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg16d7db8f1085a3
pyjwt@2.3.0
2.12.0

Open the chart page →

12,930
mealiertomik-helm-chartsVerified publisher0.0.21 of 1See more

mealie rtomik-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
pyjwt@2.10.1
2.12.0

Open the chart page →

3,929
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
pyjwt@2.6.0-1
pyjwt@2.6.0
2.6.0-1+deb12u1
2.12.0

Open the chart page →

38,107
iopsciencemeshVerified publisher0.4.01 of 2See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
pyjwt@2.6.0
2.12.0

Open the chart page →

4,052
slo-reportingslo-reportingVerified publisher0.3.341 of 2See more

slo-reporting slo-reporting 0.3.34

1 of the 2 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
pyjwt@2.10.1
2.12.0

Open the chart page →

2,928
alertasomeblackmagic0.2.31 of 2See more

alerta someblackmagic 0.2.3

1 of the 2 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
alerta/alerta-web:8.5.04786b9eaa606
pyjwt@2.1.0
2.12.0

Open the chart page →

3,162
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
statcan/ckan:2.93921305425b8
pyjwt@1.7.1
2.12.0

Open the chart page →

24,930
synapsesudermanjr1.1.51 of 1See more

synapse sudermanjr 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
pyjwt@2.3.0
2.12.0

Open the chart page →

3,332
taigaunxwaresVerified publisher2026.3.81 of 6See more

taiga unxwares 2026.3.8

1 of the 6 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
pyjwt@2.10.1
2.12.0

Open the chart page →

9,148
verbacapverbacapVerified publisher1.0.71 of 1See more

verbacap verbacap 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
pyjwt@2.8.0
2.12.0

Open the chart page →

2,233
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
pyjwt@2.6.0
2.12.0

Open the chart page →

30,028
airbyteairbyte-v2Verified publisher2.2.01 of 10See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.23.73b3a670af168
pyjwt@2.10.1
2.12.0

Open the chart page →

12,473
browserlessalekcVerified publisher1.2.71 of 1See more

browserless alekc 1.2.7

1 of the 1 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
pyjwt@2.7.0
2.12.0

Open the chart page →

2,078
radosgwananace-chartsVerified publisher0.3.41 of 1See more

radosgw ananace-charts 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
ceph/daemon:latest-nautilus90f30824a96e
pyjwt@1.5.3
2.12.0

Open the chart page →

1,650
games-on-whalesangelnu2.0.01 of 7See more

games-on-whales angelnu 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/xorg:1.0.0305b3327ebba
pyjwt@1.7.1
2.12.0

Open the chart page →

42,126
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
pyjwt@2.11.0
2.12.0

Open the chart page →

5,558
ddosifyanteonVerified publisher1.7.52 of 13See more

ddosify anteon 1.7.5

2 of the 13 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
pyjwt@2.8.0
2.12.0
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
pyjwt@2.8.0
2.12.0

Open the chart page →

25,669
pgadminappscodeVerified publisher2026.3.301 of 1See more

pgadmin appscode 2026.3.30

1 of the 1 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.11.050700ac17936
pyjwt@2.10.1
2.12.0

Open the chart page →

1,565
pgadminarunalakmalVerified publisher0.1.01 of 1See more

pgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
pyjwt@2.4.0
2.12.0

Open the chart page →

2,418
swdpgadminarunalakmalVerified publisher0.1.01 of 1See more

swdpgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
pyjwt@2.4.0
2.12.0

Open the chart page →

2,418
keystonearzu0.2.291 of 4See more

keystone arzu 0.2.29

1 of the 4 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
pyjwt@2.0.1
2.12.0

Open the chart page →

22,568
locationprocessingassist-iot-location-processing1.0.01 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
pyjwt@2.4.0
2.12.0

Open the chart page →

10,061
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
pyjwt@2.3.0-1ubuntu0.2
pyjwt@2.3.0
2.3.0-1ubuntu0.3
2.12.0

Open the chart page →

32,501
shynetatrox0.1.11 of 1See more

shynet atrox 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.12.0e821e31140f7
pyjwt@2.3.0
2.12.0

Open the chart page →

5,507
azure-advanced-backupazure-advanced-backup0.4.11 of 1See more

azure-advanced-backup azure-advanced-backup 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
pyjwt@2.4.0
2.12.0

Open the chart page →

4,568
azure-app-exporterazure-app-exporterVerified publisher0.4.21 of 2See more

azure-app-exporter azure-app-exporter 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
ghcr.io/dodevops/azure-app-exporter/azure-app-exporter:0.1.38b472877847f5
pyjwt@2.8.0
2.12.0

Open the chart page →

1,790
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
pyjwt@1.7.1
2.12.0

Open the chart page →

22,891
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
pyjwt@2.8.0
2.12.0

Open the chart page →

10,145
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-32597.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
pyjwt@1.7.1
2.12.0

Open the chart page →

2,504

Container images carrying it

236 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
pyjwt@2.6.0
2.12.0
1
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
pyjwt@2.10.1
2.12.0
1
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
pyjwt@2.10.1
2.12.0
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
pyjwt@2.8.0
2.12.0
1
ghcr.io/mlops-for-all/mlflow-tracking-server:3.8-1.30.1-v1.0.0d30e631684c3
pyjwt@2.7.0
2.12.0
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
pyjwt@2.10.1
2.12.0
1
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
pyjwt@2.7.0
2.12.0
1
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
pyjwt@2.7.0
2.12.0
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
pyjwt@2.7.0
2.12.0
1
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
pyjwt@2.7.0
2.12.0
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
pyjwt@2.9.0
2.12.0
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
pyjwt@2.9.0
2.12.0
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
pyjwt@2.10.1
2.12.0
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
pyjwt@2.10.1
2.12.0
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
pyjwt@2.10.1
2.12.0
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
pyjwt@2.10.1
2.12.0
1
ghcr.io/porelli/firefox-sync:syncstorage-rs-mysql-0.18.27d244e514216
pyjwt@2.10.1
2.12.0
1
ghcr.io/shadrus/srebot:0.14.09b4415e937b2
pyjwt@2.11.0
2.12.0
1
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
pyjwt@2.10.1
2.12.0
1
ghcr.io/substra/substra-backend:1.0.121967f54ec86
pyjwt@2.9.0
2.12.0
1
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
pyjwt@2.10.1
2.12.0
1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
pyjwt@2.4.0
2.12.0
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
pyjwt@2.8.0
2.12.0
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
pyjwt@2.10.1
2.12.0
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
pyjwt@2.9.0
2.12.0
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
pyjwt@2.4.0
2.12.0
1
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
pyjwt@2.10.1
2.12.0
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
pyjwt@2.3.0
2.12.0
1
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
pyjwt@2.8.0
2.12.0
1
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
pyjwt@2.4.0
2.12.0
1
quay.io/ortelius/ms-validate-user:main-v10.0.1694-g98ed94b5054bd4e97a
pyjwt@2.10.1
2.12.0
1
quay.io/stackgres/operator:1.19.1f241b0b20326
pyjwt@2.9.0
2.12.0
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
pyjwt@2.8.0
2.12.0
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
pyjwt@1.7.1
2.12.0
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
pyjwt@1.7.1
2.12.0
1
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
pyjwt@2.10.1
2.12.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.