StackRadar

GHSA-pxh4-856f-4h89

High

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
High
worst across findings
CVSS
7.4
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
326
of 18,232 indexed, latest versions
Container images
338
deployed by those charts
Fix available
1 of 1
affected package

PyJWT: HS256/384/512 verify accepts empty HMAC key via oct JWK (PyJWK/PyJWKClient) enabling token forgery

Carried by container images the latest versions of 326 of 18,232 indexed charts deploy, on 338 images.

Affected packageAffected versionsFixed inImages
pyjwtpypi1.4.2, 1.5.3, 1.6.1, 1.6.4+17 more2.14.0338
OSV records
GHSA-pxh4-856f-4h89

Charts affected

326 by stars
ChartLatestAffected imagesRadar Score
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

78,513
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

79,541
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

79,541
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

79,541
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

78,513
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

78,513
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

79,541
smtpsmtpVerified publisher1.3.31 of 1See more

smtp smtp 1.3.3

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
pyjwt@2.10.1
2.14.0

Open the chart page →

2,010
srebotsrebot0.14.01 of 2See more

srebot srebot 0.14.0

1 of the 2 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/shadrus/srebot:0.14.09b4415e937b2
pyjwt@2.11.0
2.14.0

Open the chart page →

1,876
servicexssl-hep1.8.61 of 16See more

servicex ssl-hep 1.8.6

1 of the 16 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
sslhep/servicex_app:v1.8.6c935e123030d
pyjwt@2.13.0
2.14.0

Open the chart page →

67,074
artifactory-cleanupsubshellVerified publisher1.0.11 of 1See more

artifactory-cleanup subshell 1.0.1

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
devopshq/artifactory-cleanup:1.0.1830e093bffa91
pyjwt@2.10.1
2.14.0

Open the chart page →

2,881
substra-backendsubstraVerified publisher26.15.31 of 7See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-backend:1.0.121967f54ec86
pyjwt@2.9.0
2.14.0

Open the chart page →

5,346
uptime-kumasupporttools2.6.01 of 3See more

uptime-kuma supporttools 2.6.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
supporttools/uptime-kuma:v2.6f8a49ed65809
pyjwt@1.7.0
2.14.0

Open the chart page →

5,500
tarkatarkaOfficialVerified publisher0.4.11 of 4See more

tarka tarka 0.4.1

1 of the 4 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/tarkyaio/tarka:0.4.1e8d3f1512f06
pyjwt@2.12.1
2.14.0

Open the chart page →

4,178
the0the0Verified publisher0.15.11 of 9See more

the0 the0 0.15.1

1 of the 9 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/alexanderwanyoike/the0/runtime:1.20.105ea40f8bc15
pyjwt@2.7.0
2.14.0

Open the chart page →

7,411
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
pyjwt@2.4.0
2.14.0

Open the chart page →

10,140
nemo-guardrailsupstreamyardVerified publisher0.1.11 of 1See more

nemo-guardrails upstreamyard 0.1.1

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
upstreamyard/nemo-guardrails:0.24.19f673183cfc0
pyjwt@2.13.0
2.14.0

Open the chart page →

1,867
uptime-platformuptime-platformVerified publisher0.1.31 of 3See more

uptime-platform uptime-platform 0.1.3

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
sashastudent/uptime-platform:latest37a82b4e598e
pyjwt@2.13.0
2.14.0

Open the chart page →

971
vaultwardenvaultwarden-helmVerified publisher1.2.71 of 2See more

vaultwarden vaultwarden-helm 1.2.7

1 of the 2 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/postgresql:18.4-system-trixie42708a75345b
pyjwt@2.13.0
2.14.0

Open the chart page →

2,302
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.252cb72a9e3da
pyjwt@2.10.1
2.14.0

Open the chart page →

6,890
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
pyjwt@2.7.0
2.14.0

Open the chart page →

5,414
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
pyjwt@2.3.0
2.14.0

Open the chart page →

72,635
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.45a065930682d
pyjwt@2.10.1
2.14.0

Open the chart page →

7,539
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
pyjwt@2.4.0
2.14.0

Open the chart page →

78,312
juicefs-csi-driverwener0.33.11 of 5See more

juicefs-csi-driver wener 0.33.1

1 of the 5 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.33.1103ac60b6b9c
pyjwt@2.6.0
2.14.0

Open the chart page →

33,783
juicefs-csi-driverwenerme0.33.11 of 5See more

juicefs-csi-driver wenerme 0.33.1

1 of the 5 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.33.1103ac60b6b9c
pyjwt@2.6.0
2.14.0

Open the chart page →

33,783

Container images carrying it

338 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
sirrend/helmup-engine:0.1.13699e79e3d4e2
pyjwt@2.8.0
2.14.0
1
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
pyjwt@2.8.0
2.14.0
1
sissbruecker/linkding:1.47.0e35cb50e0581
pyjwt@2.13.0
2.14.0
1
sslhep/servicex_app:v1.8.6c935e123030d
pyjwt@2.13.0
2.14.0
1
statcan/ckan:2.93921305425b8
pyjwt@1.7.1
2.14.0
1
supporttools/uptime-kuma:v2.6f8a49ed65809
pyjwt@1.7.0
2.14.0
1
tachyongroup/mlflow-deployment-controller:mlflow-controller-0.1.87e79b9000856
pyjwt@2.6.0
2.14.0
1
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
pyjwt@2.6.0
2.14.0
1
taigaio/taiga-back:latest4beed8f62c9f
pyjwt@2.10.1
2.14.0
1
taigaio/taiga-back:6.4.29f97323cc150
pyjwt@2.1.0
2.14.0
1
timescale/timescaledb-ha:pg169c6c86701e9b
pyjwt@2.3.0
2.14.0
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
pyjwt@2.3.0
2.14.0
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
pyjwt@2.3.0
2.14.0
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
pyjwt@2.3.0
2.14.0
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
pyjwt@2.3.0
2.14.0
1
tombursch/kitchenowl-backend:v0.7.104a7ed693531b
pyjwt@2.13.0
2.14.0
1
toniblyx/prowler:stable9dbcc3c9abd7
pyjwt@2.13.0
2.14.0
1
truebyteinnovationllp/jupyterhub-k8s:5.5.06bf978b96279
pyjwt@2.13.0
2.14.0
1
trueosiris/vrising:latest9356f98ad561
pyjwt@2.3.0
2.14.0
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
pyjwt@2.3.0
2.14.0
1
upstreamyard/nemo-guardrails:0.24.19f673183cfc0
pyjwt@2.13.0
2.14.0
1
vabene1111/recipes:2.3.50f8d061895e9
pyjwt@2.10.1
2.14.0
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
pyjwt@2.3.0
2.14.0
1
voska/hass-mcp:latest7142a431e2c5
pyjwt@2.13.0
2.14.0
1
wazuh/wazuh-manager:4.11.11da5c38c6a78
pyjwt@2.8.0
2.14.0
1
wazuh/wazuh-manager:4.14.45a065930682d
pyjwt@2.10.1
2.14.0
1
wazuh/wazuh-manager:4.14.3f09282d281f6
pyjwt@2.10.1
2.14.0
1
weblate/weblate:3.11.3-182848df56ecd
pyjwt@1.7.1
2.14.0
1
wger/server:2.71c5789b93bfe
pyjwt@2.13.0
2.14.0
1
yetiplatform/yeti:latest8673609841e3
pyjwt@2.10.1
2.14.0
1
yetiplatform/yeti:2.9.09bcbe2650a14
pyjwt@2.10.1
2.14.0
1
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
pyjwt@2.10.1
2.14.0
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
pyjwt@2.10.1
2.14.0
1
ghcr.io/alexanderwanyoike/the0/runtime:1.20.105ea40f8bc15
pyjwt@2.7.0
2.14.0
1
ghcr.io/almarklein/timetagger:v26.1.3-nonroot18a81afcb249
pyjwt@2.11.0
2.14.0
1
ghcr.io/argonix-io/argonix-api:0.6.5431abcce7c1e
pyjwt@2.13.0
2.14.0
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
pyjwt@2.9.0
2.14.0
1
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
pyjwt@2.7.0
2.14.0
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
pyjwt@2.7.0
2.14.0
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
pyjwt@2.10.1
2.14.0
1
ghcr.io/cfi2017/opencve-web:3.0.06961eab190a2
pyjwt@2.13.0
2.14.0
1
ghcr.io/cloudnative-pg/postgresql:18899d3ed526b6
pyjwt@2.13.0
2.14.0
1
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
pyjwt@2.6.0
2.14.0
1
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
pyjwt@2.10.1
2.14.0
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
pyjwt@2.8.0
2.14.0
1
ghcr.io/crazy-max/firefox-syncserver:1.8.0ab1a959d8105
pyjwt@1.7.1
2.14.0
1
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latesta62ce2221b43
pyjwt@2.13.0
2.14.0
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
pyjwt@2.4.0
2.14.0
1
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
pyjwt@2.4.0
2.14.0
1
ghcr.io/dodevops/azure-app-exporter/azure-app-exporter:0.1.38b472877847f5
pyjwt@2.8.0
2.14.0
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.