StackRadar

GHSA-pxh4-856f-4h89

High

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
High
worst across findings
CVSS
7.4
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
326
of 18,232 indexed, latest versions
Container images
338
deployed by those charts
Fix available
1 of 1
affected package

PyJWT: HS256/384/512 verify accepts empty HMAC key via oct JWK (PyJWK/PyJWKClient) enabling token forgery

Carried by container images the latest versions of 326 of 18,232 indexed charts deploy, on 338 images.

Affected packageAffected versionsFixed inImages
pyjwtpypi1.4.2, 1.5.3, 1.6.1, 1.6.4+17 more2.14.0338
OSV records
GHSA-pxh4-856f-4h89

Charts affected

326 by stars
ChartLatestAffected imagesRadar Score
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

78,513
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

79,541
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

79,541
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

79,541
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

78,513
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

78,513
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

79,541
smtpsmtpVerified publisher1.3.31 of 1See more

smtp smtp 1.3.3

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
pyjwt@2.10.1
2.14.0

Open the chart page →

2,010
srebotsrebot0.14.01 of 2See more

srebot srebot 0.14.0

1 of the 2 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/shadrus/srebot:0.14.09b4415e937b2
pyjwt@2.11.0
2.14.0

Open the chart page →

1,876
servicexssl-hep1.8.61 of 16See more

servicex ssl-hep 1.8.6

1 of the 16 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
sslhep/servicex_app:v1.8.6c935e123030d
pyjwt@2.13.0
2.14.0

Open the chart page →

67,074
artifactory-cleanupsubshellVerified publisher1.0.11 of 1See more

artifactory-cleanup subshell 1.0.1

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
devopshq/artifactory-cleanup:1.0.1830e093bffa91
pyjwt@2.10.1
2.14.0

Open the chart page →

2,881
substra-backendsubstraVerified publisher26.15.31 of 7See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-backend:1.0.121967f54ec86
pyjwt@2.9.0
2.14.0

Open the chart page →

5,346
uptime-kumasupporttools2.6.01 of 3See more

uptime-kuma supporttools 2.6.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
supporttools/uptime-kuma:v2.6f8a49ed65809
pyjwt@1.7.0
2.14.0

Open the chart page →

5,500
tarkatarkaOfficialVerified publisher0.4.11 of 4See more

tarka tarka 0.4.1

1 of the 4 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/tarkyaio/tarka:0.4.1e8d3f1512f06
pyjwt@2.12.1
2.14.0

Open the chart page →

4,178
the0the0Verified publisher0.15.11 of 9See more

the0 the0 0.15.1

1 of the 9 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/alexanderwanyoike/the0/runtime:1.20.105ea40f8bc15
pyjwt@2.7.0
2.14.0

Open the chart page →

7,411
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
pyjwt@2.4.0
2.14.0

Open the chart page →

10,140
nemo-guardrailsupstreamyardVerified publisher0.1.11 of 1See more

nemo-guardrails upstreamyard 0.1.1

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
upstreamyard/nemo-guardrails:0.24.19f673183cfc0
pyjwt@2.13.0
2.14.0

Open the chart page →

1,867
uptime-platformuptime-platformVerified publisher0.1.31 of 3See more

uptime-platform uptime-platform 0.1.3

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
sashastudent/uptime-platform:latest37a82b4e598e
pyjwt@2.13.0
2.14.0

Open the chart page →

971
vaultwardenvaultwarden-helmVerified publisher1.2.71 of 2See more

vaultwarden vaultwarden-helm 1.2.7

1 of the 2 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/postgresql:18.4-system-trixie42708a75345b
pyjwt@2.13.0
2.14.0

Open the chart page →

2,302
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.252cb72a9e3da
pyjwt@2.10.1
2.14.0

Open the chart page →

6,890
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
pyjwt@2.7.0
2.14.0

Open the chart page →

5,414
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
pyjwt@2.3.0
2.14.0

Open the chart page →

72,635
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.45a065930682d
pyjwt@2.10.1
2.14.0

Open the chart page →

7,539
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
pyjwt@2.4.0
2.14.0

Open the chart page →

78,312
juicefs-csi-driverwener0.33.11 of 5See more

juicefs-csi-driver wener 0.33.1

1 of the 5 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.33.1103ac60b6b9c
pyjwt@2.6.0
2.14.0

Open the chart page →

33,783
juicefs-csi-driverwenerme0.33.11 of 5See more

juicefs-csi-driver wenerme 0.33.1

1 of the 5 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.33.1103ac60b6b9c
pyjwt@2.6.0
2.14.0

Open the chart page →

33,783

Container images carrying it

338 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
homeassistant/home-assistant:2023.10.3021e2afc6e57
pyjwt@2.8.0
2.14.0
1
homeassistant/home-assistant:2022.3.5565751f33794
pyjwt@2.1.0
2.14.0
1
homeassistant/home-assistant:2026.75a531753cea9
pyjwt@2.12.1
2.14.0
1
homeassistant/home-assistant:2023.12.48d000332b09b
pyjwt@2.8.0
2.14.0
1
homeassistant/home-assistant:2026.8.0a21689ef0510
pyjwt@2.13.0
2.14.0
1
i4trust/activation-service:2.2.09f3719176893
pyjwt@2.7.0
2.14.0
1
improwised/erpnext-worker:v13.4.197280b55cbd4
pyjwt@1.7.1
2.14.0
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
pyjwt@2.12.1
2.14.0
1
jertel/elastalert2:2.31.03cbf63f9b7dc
pyjwt@2.13.0
2.14.0
1
jertel/elastalert2:2.2.34dcc0ef93efc
pyjwt@1.7.1
2.14.0
1
jmferrer/azure-devops-agent:latest030f68ec6998
pyjwt@1.7.1
2.14.0
1
john19968010/fastapi-template:latest31a90f6bd69c
pyjwt@2.6.0
2.14.0
1
juicedata/juicefs-csi-driver:v0.23.0d915e899e322
pyjwt@1.7.1
2.14.0
1
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
pyjwt@2.8.0
2.14.0
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
pyjwt@1.7.1
2.14.0
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
pyjwt@1.7.1
2.14.0
1
jupyterhub/k8s-hub:0.9.1ec78bdae0fed
pyjwt@1.7.1
2.14.0
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
pyjwt@1.7.1
2.14.0
1
kelvinsp/mlflow:1.26.1cd33e6db2a59
pyjwt@2.4.0
2.14.0
1
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
pyjwt@2.12.1
2.14.0
1
kiwigrid/k8s-sidecar:0.0.186eb52513d59e
pyjwt@1.7.1
2.14.0
1
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
pyjwt@1.7.1
2.14.0
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
pyjwt@2.3.0
2.14.0
1
kubegems/juicefs-mount:ce-v1.1.010abb76892b8
pyjwt@1.7.0
2.14.0
1
langgenius/dify-api:1.0.0066035f93856
pyjwt@2.8.0
2.14.0
1
langgenius/dify-api:1.17.052be6088dd84
pyjwt@2.13.0
2.14.0
1
langgenius/dify-api:0.6.11fca918260dd6
pyjwt@2.8.0
2.14.0
1
linuxserver/medusa:v1.0.27-ls295250f3a9e2146
pyjwt@2.10.1
2.14.0
1
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
pyjwt@1.7.1
2.14.0
1
litellm/litellm-non_root:v1.82.3-stable09b217802ded
pyjwt@2.12.0
2.14.0
1
loeken/home-assistant:2026.9.2b1dff5b4c593
pyjwt@2.13.0
2.14.0
1
louislam/uptime-kuma:1.22.10b55bcb83a1c
pyjwt@1.7.0
2.14.0
1
louislam/uptime-kuma:2.0.24c364ef96aad
pyjwt@2.6.0
2.14.0
1
louislam/uptime-kuma:2.5.6-slim5db97dbbef61
pyjwt@2.6.0
2.14.0
1
louislam/uptime-kuma:170233f4acb51
pyjwt@1.7.0
2.14.0
1
louislam/uptime-kuma:2.5.4917318f9d7be
pyjwt@2.6.0
2.14.0
1
louislam/uptime-kuma:2.4.091e963bfda56
pyjwt@2.6.0
2.14.0
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
pyjwt@2.6.0
2.14.0
1
louislam/uptime-kuma:1.17.1a4eab252e5a2
pyjwt@1.7.0
2.14.0
1
louislam/uptime-kuma:1.18.5a84767d7934f
pyjwt@1.7.0
2.14.0
1
louislam/uptime-kuma:2.5.0a8610b3b4c38
pyjwt@2.6.0
2.14.0
1
louislam/uptime-kuma:1.23.12bc6f244ecf27
pyjwt@1.7.0
2.14.0
1
louislam/uptime-kuma:2.5.5c74379ac4509
pyjwt@2.6.0
2.14.0
1
louislam/uptime-kuma:2.5.1ecd5b8c8b49f
pyjwt@2.6.0
2.14.0
1
lsstsqre/prepuller:latest19c2dfc4e4ff
pyjwt@2.1.0
2.14.0
1
lsstsqre/sciplat-hub:latest5e0ade6bed1c
pyjwt@2.0.1
2.14.0
1
lsstsqre/squash-api:0.5.34879415ec6ac
pyjwt@1.4.2
2.14.0
1
lsstsqre/wfdispatcher:lateste9feb99f524d
pyjwt@2.0.1
2.14.0
1
makeplane/backend-commercial:v3.3.39f650887385e
pyjwt@2.13.0
2.14.0
1
makeplane/plane-mcp-server:v0.3.071b7252adef0
pyjwt@2.13.0
2.14.0
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.