StackRadar

GHSA-pxh4-856f-4h89

High

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
High
worst across findings
CVSS
7.4
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
326
of 18,232 indexed, latest versions
Container images
338
deployed by those charts
Fix available
1 of 1
affected package

PyJWT: HS256/384/512 verify accepts empty HMAC key via oct JWK (PyJWK/PyJWKClient) enabling token forgery

Carried by container images the latest versions of 326 of 18,232 indexed charts deploy, on 338 images.

Affected packageAffected versionsFixed inImages
pyjwtpypi1.4.2, 1.5.3, 1.6.1, 1.6.4+17 more2.14.0338
OSV records
GHSA-pxh4-856f-4h89

Charts affected

326 by stars
ChartLatestAffected imagesRadar Score
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

78,513
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

79,541
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

79,541
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

79,541
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

78,513
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

78,513
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

79,541
smtpsmtpVerified publisher1.3.31 of 1See more

smtp smtp 1.3.3

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
pyjwt@2.10.1
2.14.0

Open the chart page →

2,010
srebotsrebot0.14.01 of 2See more

srebot srebot 0.14.0

1 of the 2 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/shadrus/srebot:0.14.09b4415e937b2
pyjwt@2.11.0
2.14.0

Open the chart page →

1,876
servicexssl-hep1.8.61 of 16See more

servicex ssl-hep 1.8.6

1 of the 16 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
sslhep/servicex_app:v1.8.6c935e123030d
pyjwt@2.13.0
2.14.0

Open the chart page →

67,074
artifactory-cleanupsubshellVerified publisher1.0.11 of 1See more

artifactory-cleanup subshell 1.0.1

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
devopshq/artifactory-cleanup:1.0.1830e093bffa91
pyjwt@2.10.1
2.14.0

Open the chart page →

2,881
substra-backendsubstraVerified publisher26.15.31 of 7See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-backend:1.0.121967f54ec86
pyjwt@2.9.0
2.14.0

Open the chart page →

5,346
uptime-kumasupporttools2.6.01 of 3See more

uptime-kuma supporttools 2.6.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
supporttools/uptime-kuma:v2.6f8a49ed65809
pyjwt@1.7.0
2.14.0

Open the chart page →

5,500
tarkatarkaOfficialVerified publisher0.4.11 of 4See more

tarka tarka 0.4.1

1 of the 4 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/tarkyaio/tarka:0.4.1e8d3f1512f06
pyjwt@2.12.1
2.14.0

Open the chart page →

4,178
the0the0Verified publisher0.15.11 of 9See more

the0 the0 0.15.1

1 of the 9 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/alexanderwanyoike/the0/runtime:1.20.105ea40f8bc15
pyjwt@2.7.0
2.14.0

Open the chart page →

7,411
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
pyjwt@2.4.0
2.14.0

Open the chart page →

10,140
nemo-guardrailsupstreamyardVerified publisher0.1.11 of 1See more

nemo-guardrails upstreamyard 0.1.1

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
upstreamyard/nemo-guardrails:0.24.19f673183cfc0
pyjwt@2.13.0
2.14.0

Open the chart page →

1,867
uptime-platformuptime-platformVerified publisher0.1.31 of 3See more

uptime-platform uptime-platform 0.1.3

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
sashastudent/uptime-platform:latest37a82b4e598e
pyjwt@2.13.0
2.14.0

Open the chart page →

971
vaultwardenvaultwarden-helmVerified publisher1.2.71 of 2See more

vaultwarden vaultwarden-helm 1.2.7

1 of the 2 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/postgresql:18.4-system-trixie42708a75345b
pyjwt@2.13.0
2.14.0

Open the chart page →

2,302
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.252cb72a9e3da
pyjwt@2.10.1
2.14.0

Open the chart page →

6,890
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
pyjwt@2.7.0
2.14.0

Open the chart page →

5,414
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
pyjwt@2.3.0
2.14.0

Open the chart page →

72,635
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.45a065930682d
pyjwt@2.10.1
2.14.0

Open the chart page →

7,539
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
pyjwt@2.4.0
2.14.0

Open the chart page →

78,312
juicefs-csi-driverwener0.33.11 of 5See more

juicefs-csi-driver wener 0.33.1

1 of the 5 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.33.1103ac60b6b9c
pyjwt@2.6.0
2.14.0

Open the chart page →

33,783
juicefs-csi-driverwenerme0.33.11 of 5See more

juicefs-csi-driver wenerme 0.33.1

1 of the 5 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.33.1103ac60b6b9c
pyjwt@2.6.0
2.14.0

Open the chart page →

33,783

Container images carrying it

338 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
buntha/mlflow:2.1.1154542cc3083
pyjwt@2.6.0
2.14.0
1
burakince/mlflow:3.16.0ab4b566644b9
pyjwt@2.13.0
2.14.0
1
camptocamp/geomapfishapp-geoportal:latest3f916d5d2f62
pyjwt@2.7.0
2.14.0
1
cdignam/kodiak:v0.54.05a6a55b39cee
pyjwt@1.7.1
2.14.0
1
ceph/daemon:latest-nautilus90f30824a96e
pyjwt@1.5.3
2.14.0
1
checkmk/check-mk-community:2.5.0p6c11b422210c4
pyjwt@2.10.1
2.14.0
1
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
pyjwt@2.13.0
2.14.0
1
ckan/ckan-base:2.12.087ecf3f27ad6
pyjwt@2.13.0
2.14.0
1
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
pyjwt@2.6.0
2.14.0
1
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
pyjwt@2.6.0
2.14.0
1
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
pyjwt@2.6.0
2.14.0
1
codecov/self-hosted-api:24.4.10475cb1c3136
pyjwt@2.8.0
2.14.0
1
codecov/self-hosted-worker:24.4.1837f546b479b
pyjwt@2.4.0
2.14.0
1
datadog/agent:7.22.08f20e56b5311
pyjwt@1.7.1
2.14.0
1
datadog/agent:6aad9994de6a7
pyjwt@1.7.1
2.14.0
1
datamate/seafile-professional:11.0.202dd66b722464
pyjwt@2.6.0
2.14.0
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
pyjwt@2.8.0
2.14.0
1
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
pyjwt@2.9.0
2.14.0
1
ddosify/selfhosted_backend:3.2.93c11e3182652
pyjwt@2.8.0
2.14.0
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
pyjwt@2.8.0
2.14.0
1
devopshq/artifactory-cleanup:1.0.1830e093bffa91
pyjwt@2.10.1
2.14.0
1
dpage/pgadmin4:8.418cd5711fc9a
pyjwt@2.8.0
2.14.0
1
dpage/pgadmin4:7.537946e4f3e7b
pyjwt@2.7.0
2.14.0
1
dpage/pgadmin4:9.11.050700ac17936
pyjwt@2.10.1
2.14.0
1
dpage/pgadmin4:9.252cb72a9e3da
pyjwt@2.10.1
2.14.0
1
dpage/pgadmin4:8.13561c1f8f99f2
pyjwt@2.9.0
2.14.0
1
evk02/mlflow:2.2.1ef6ff257ef35
pyjwt@2.6.0
2.14.0
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
pyjwt@2.9.0
2.14.0
1
fiware/ishare-satellite:1.2.0c3c1c8ccfb45
pyjwt@2.4.0
2.14.0
1
flagsmith/flagsmith-api:v2.6.0fd58556339a4
pyjwt@1.7.1
2.14.0
1
frankescobar/allure-docker-service:2.27.00815040339a9
pyjwt@2.8.0
2.14.0
1
frankescobar/allure-docker-service:2.35.14154286c0209
pyjwt@2.10.1
2.14.0
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
pyjwt@1.7.1
2.14.0
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
pyjwt@1.7.1
2.14.0
1
frankescobar/allure-docker-service:latestdc171ec796d5
pyjwt@2.13.0
2.14.0
1
galaxy/cloudman-server:lateste5c265fe9fcd
pyjwt@2.4.0
2.14.0
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
pyjwt@2.10.1
2.14.0
1
gethue/hue:4.11.011b649636e68
pyjwt@2.4.0
2.14.0
1
gethue/hue:4.10.05702b2c37ff9
pyjwt@1.7.1
2.14.0
1
gethue/hue:latest7d5c1b9f8a79
pyjwt@2.4.0
2.14.0
1
getsentry/sentry-kubernetes:latest6ac37974fd2a
pyjwt@1.7.1
2.14.0
1
gluufederation/cloudtools:4.5.17-1fe944d2e5d0f
pyjwt@2.13.0
2.14.0
1
gpappsoft/privacyidea-docker:3.12.2af7841adad26
pyjwt@2.10.1
2.14.0
1
grafana/oncall:v1.13.11159b6b836fed
pyjwt@2.8.0
2.14.0
1
grafana/oncall:v1.16.5499851658393
pyjwt@2.10.1
2.14.0
1
hayk96/alerta-web:9.0.486377705e9e3
pyjwt@2.10.1
2.14.0
1
heartexlabs/label-studio:latestafcc516a2277
pyjwt@2.13.0
2.14.0
1
helmforge/fastmcp-server:0.2.061f759a1421f
pyjwt@2.12.1
2.14.0
1
helmforge/fastmcp-server:0.11.2fcb7017327d6
pyjwt@2.12.1
2.14.0
1
hhyo/archery:v1.9.11aa41843419e
pyjwt@2.5.0
2.14.0
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.