StackRadar

GHSA-6c5p-j8vq-pqhj

High

Advisory

Published 26 Apr 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.4
base score, highest
EPSS
0.003
23rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
23
of 17,781 indexed, latest versions
Container images
27
deployed by those charts
Fix available
1 of 1
affected package

python-jose algorithm confusion with OpenSSH ECDSA keys

Carried by container images the latest versions of 23 of 17,781 indexed charts deploy, on 27 images.

Affected packageAffected versionsFixed inImages
python-josepypi3.0.1, 3.1.0, 3.2.0, 3.3.03.4.027
OSV records
GHSA-6c5p-j8vq-pqhjPYSEC-2024-232
Also known as
CVE-2024-33663, CVE-2026-85394

Charts affected

23 by stars
ChartLatestAffected imagesRadar Score
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
python-jose@3.3.0
3.4.0

Open the chart page →

9,145
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
python-jose@3.3.0
3.4.0

Open the chart page →

7,705
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
python-jose@3.3.0
3.4.0

Open the chart page →

6,041
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
python-jose@3.3.0
3.4.0

Open the chart page →

7,579
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
python-jose@3.1.0
3.4.0

Open the chart page →

10,730
rommcrystalnetVerified publisher0.2.201 of 3See more

romm crystalnet 0.2.20

1 of the 3 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
zurdi15/romm:2.3.12db88fe44c89
python-jose@3.3.0
3.4.0

Open the chart page →

1,944
clowder2ncsaVerified publisher1.9.73 of 12See more

clowder2 ncsa 1.9.7

3 of the 12 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
python-jose@3.3.0
3.4.0
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
python-jose@3.3.0
3.4.0
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
python-jose@3.3.0
3.4.0

Open the chart page →

37,373
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
python-jose@3.3.0
3.4.0

Open the chart page →

18,277
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
python-jose@3.3.0
3.4.0

Open the chart page →

9,412
ekorrecamptocamp30.1.11 of 1See more

ekorre camptocamp3 0.1.1

1 of the 1 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
camptocamp/ekorre:0.1.035c91d5fda04
python-jose@3.1.0
3.4.0

Open the chart page →

3,891
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.4.121994f40e0da
python-jose@3.1.0
3.4.0

Open the chart page →

13,852
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
python-jose@3.3.0
3.4.0

Open the chart page →

6,179
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
python-jose@3.0.1
3.4.0

Open the chart page →

27,728
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
python-jose@3.0.1
3.4.0

Open the chart page →

24,335
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
python-jose@3.3.0
3.4.0

Open the chart page →

4,647
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
python-jose@3.3.0
3.4.0

Open the chart page →

6,447
nubladolsst-sqre0.9.233 of 5See more

nublado lsst-sqre 0.9.23

3 of the 5 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
lsstsqre/prepuller:latest19c2dfc4e4ff
python-jose@3.2.0
3.4.0
lsstsqre/sciplat-hub:latest5e0ade6bed1c
python-jose@3.2.0
3.4.0
lsstsqre/wfdispatcher:lateste9feb99f524d
python-jose@3.2.0
3.4.0

Open the chart page →

5,786
mockoidcoidcmockVerified publisher0.0.11 of 1See more

mockoidc oidcmock 0.0.1

1 of the 1 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
marcoimme/oidcmock:latestb6035c0721a8
python-jose@3.3.0
3.4.0

Open the chart page →

2,298
prompt-dbprompt-dbVerified publisher1.0.71 of 3See more

prompt-db prompt-db 1.0.7

1 of the 3 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
ghcr.io/erlkoenig91/prompt-db-backend:1.0.7ab120359810d
python-jose@3.3.0
3.4.0

Open the chart page →

3,332
kresusrm3lVerified publisher0.2.11 of 3See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
python-jose@3.3.0
3.4.0

Open the chart page →

15,591
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
python-jose@3.1.0
3.4.0

Open the chart page →

8,694
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
python-jose@3.3.0
3.4.0

Open the chart page →

5,565
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry GHSA-6c5p-j8vq-pqhj.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
python-jose@3.1.0
3.4.0

Open the chart page →

11,119

Container images carrying it

27 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
python-jose@3.1.0
python-jose@3.1.0
3.4.0
3.4.0
1
assistiot/open_api_backend:1.1.230812ba93555
python-jose@3.3.0
python-jose@3.3.0
3.4.0
3.4.0
1
bnjbvr/kresus:0.22.137e216b182c8
python-jose@3.3.0
python-jose@3.3.0
3.4.0
3.4.0
1
camptocamp/ekorre:0.1.035c91d5fda04
python-jose@3.1.0
python-jose@3.1.0
3.4.0
3.4.0
1
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
python-jose@3.3.0
python-jose@3.3.0
3.4.0
3.4.0
1
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
python-jose@3.3.0
python-jose@3.3.0
3.4.0
3.4.0
1
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
python-jose@3.3.0
python-jose@3.3.0
3.4.0
3.4.0
1
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
python-jose@3.3.0
python-jose@3.3.0
3.4.0
3.4.0
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
python-jose@3.3.0
python-jose@3.3.0
3.4.0
3.4.0
1
homeassistant/home-assistant:2023.12.48d000332b09b
python-jose@3.3.0
python-jose@3.3.0
3.4.0
3.4.0
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
python-jose@3.1.0
python-jose@3.1.0
3.4.0
3.4.0
1
localstack/localstack:3.19d278167f2b7
python-jose@3.3.0
python-jose@3.3.0
3.4.0
3.4.0
1
lsstsqre/prepuller:latest19c2dfc4e4ff
python-jose@3.2.0
python-jose@3.2.0
3.4.0
3.4.0
1
lsstsqre/sciplat-hub:latest5e0ade6bed1c
python-jose@3.2.0
python-jose@3.2.0
3.4.0
3.4.0
1
lsstsqre/wfdispatcher:lateste9feb99f524d
python-jose@3.2.0
python-jose@3.2.0
3.4.0
3.4.0
1
marcoimme/oidcmock:latestb6035c0721a8
python-jose@3.3.0
python-jose@3.3.0
3.4.0
3.4.0
1
netboxcommunity/netbox:v3.2.83d652dca5351
python-jose@3.3.0
python-jose@3.3.0
3.4.0
3.4.0
1
opendatacube/restcube:latest91870111837c
python-jose@3.0.1
python-jose@3.0.1
3.4.0
3.4.0
1
opendatacube/wms:latest1b90cdf68831
python-jose@3.0.1
python-jose@3.0.1
3.4.0
3.4.0
1
wazuh/wazuh-manager:4.4.121994f40e0da
python-jose@3.1.0
python-jose@3.1.0
3.4.0
3.4.0
1
weblate/weblate:3.11.3-182848df56ecd
python-jose@3.1.0
python-jose@3.1.0
3.4.0
3.4.0
1
zurdi15/romm:2.3.12db88fe44c89
python-jose@3.3.0
python-jose@3.3.0
3.4.0
3.4.0
1
ghcr.io/erlkoenig91/prompt-db-backend:1.0.7ab120359810d
python-jose@3.3.0
python-jose@3.3.0
3.4.0
3.4.0
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
python-jose@3.3.0
python-jose@3.3.0
3.4.0
3.4.0
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
python-jose@3.3.0
python-jose@3.3.0
3.4.0
3.4.0
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
python-jose@3.3.0
python-jose@3.3.0
3.4.0
3.4.0
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
python-jose@3.3.0
python-jose@3.3.0
3.4.0
3.4.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.