StackRadar

GHSA-pxh4-856f-4h89

High

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
High
worst across findings
CVSS
7.4
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
326
of 18,232 indexed, latest versions
Container images
338
deployed by those charts
Fix available
1 of 1
affected package

PyJWT: HS256/384/512 verify accepts empty HMAC key via oct JWK (PyJWK/PyJWKClient) enabling token forgery

Carried by container images the latest versions of 326 of 18,232 indexed charts deploy, on 338 images.

Affected packageAffected versionsFixed inImages
pyjwtpypi1.4.2, 1.5.3, 1.6.1, 1.6.4+17 more2.14.0338
OSV records
GHSA-pxh4-856f-4h89

Charts affected

326 by stars
ChartLatestAffected imagesRadar Score
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

78,513
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

79,541
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

79,541
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

79,541
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

78,513
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

78,513
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

79,541
smtpsmtpVerified publisher1.3.31 of 1See more

smtp smtp 1.3.3

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
pyjwt@2.10.1
2.14.0

Open the chart page →

2,010
srebotsrebot0.14.01 of 2See more

srebot srebot 0.14.0

1 of the 2 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/shadrus/srebot:0.14.09b4415e937b2
pyjwt@2.11.0
2.14.0

Open the chart page →

1,876
servicexssl-hep1.8.61 of 16See more

servicex ssl-hep 1.8.6

1 of the 16 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
sslhep/servicex_app:v1.8.6c935e123030d
pyjwt@2.13.0
2.14.0

Open the chart page →

67,074
artifactory-cleanupsubshellVerified publisher1.0.11 of 1See more

artifactory-cleanup subshell 1.0.1

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
devopshq/artifactory-cleanup:1.0.1830e093bffa91
pyjwt@2.10.1
2.14.0

Open the chart page →

2,881
substra-backendsubstraVerified publisher26.15.31 of 7See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-backend:1.0.121967f54ec86
pyjwt@2.9.0
2.14.0

Open the chart page →

5,346
uptime-kumasupporttools2.6.01 of 3See more

uptime-kuma supporttools 2.6.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
supporttools/uptime-kuma:v2.6f8a49ed65809
pyjwt@1.7.0
2.14.0

Open the chart page →

5,500
tarkatarkaOfficialVerified publisher0.4.11 of 4See more

tarka tarka 0.4.1

1 of the 4 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/tarkyaio/tarka:0.4.1e8d3f1512f06
pyjwt@2.12.1
2.14.0

Open the chart page →

4,178
the0the0Verified publisher0.15.11 of 9See more

the0 the0 0.15.1

1 of the 9 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/alexanderwanyoike/the0/runtime:1.20.105ea40f8bc15
pyjwt@2.7.0
2.14.0

Open the chart page →

7,411
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
pyjwt@2.4.0
2.14.0

Open the chart page →

10,140
nemo-guardrailsupstreamyardVerified publisher0.1.11 of 1See more

nemo-guardrails upstreamyard 0.1.1

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
upstreamyard/nemo-guardrails:0.24.19f673183cfc0
pyjwt@2.13.0
2.14.0

Open the chart page →

1,867
uptime-platformuptime-platformVerified publisher0.1.31 of 3See more

uptime-platform uptime-platform 0.1.3

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
sashastudent/uptime-platform:latest37a82b4e598e
pyjwt@2.13.0
2.14.0

Open the chart page →

971
vaultwardenvaultwarden-helmVerified publisher1.2.71 of 2See more

vaultwarden vaultwarden-helm 1.2.7

1 of the 2 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/postgresql:18.4-system-trixie42708a75345b
pyjwt@2.13.0
2.14.0

Open the chart page →

2,302
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.252cb72a9e3da
pyjwt@2.10.1
2.14.0

Open the chart page →

6,890
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
pyjwt@2.7.0
2.14.0

Open the chart page →

5,414
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
pyjwt@2.3.0
2.14.0

Open the chart page →

72,635
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.45a065930682d
pyjwt@2.10.1
2.14.0

Open the chart page →

7,539
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
pyjwt@2.4.0
2.14.0

Open the chart page →

78,312
juicefs-csi-driverwener0.33.11 of 5See more

juicefs-csi-driver wener 0.33.1

1 of the 5 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.33.1103ac60b6b9c
pyjwt@2.6.0
2.14.0

Open the chart page →

33,783
juicefs-csi-driverwenerme0.33.11 of 5See more

juicefs-csi-driver wenerme 0.33.1

1 of the 5 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.33.1103ac60b6b9c
pyjwt@2.6.0
2.14.0

Open the chart page →

33,783

Container images carrying it

338 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/eslupmi/impulse:v3.7.1186a24030e82
pyjwt@2.10.1
2.14.0
1
ghcr.io/gabe565/obico/web:latest6acb4a5903eb
pyjwt@2.10.1
2.14.0
1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
pyjwt@2.13.0
2.14.0
1
ghcr.io/getsentry/snuba:26.7.210f8d164109b
pyjwt@2.13.0
2.14.0
1
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
pyjwt@2.11.0
2.14.0
1
ghcr.io/goauthentik/server:2026.8.3ab9b4e8cc4ab
pyjwt@2.13.0
2.14.0
1
ghcr.io/grycap/im:latest06a16d4f279f
pyjwt@2.10.1
2.14.0
1
ghcr.io/home-assistant/home-assistant:2026.3.10e091dfce306
pyjwt@2.10.1
2.14.0
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
pyjwt@2.10.1
2.14.0
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
pyjwt@2.10.1
2.14.0
1
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
pyjwt@2.13.0
2.14.0
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
pyjwt@2.3.0
2.14.0
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
pyjwt@2.8.0
2.14.0
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
pyjwt@2.10.1
2.14.0
1
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
pyjwt@2.10.1
2.14.0
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
pyjwt@2.11.0
2.14.0
1
ghcr.io/iisas/domino-rest:latest3009350bfc11
pyjwt@2.10.1
2.14.0
1
ghcr.io/linuxserver/papermerge:version-v2.0.198ba2dd3f0bd
pyjwt@2.4.0
2.14.0
1
ghcr.io/linuxserver/sickchill:2021.5.10-1-ls63a607452a692a
pyjwt@2.1.0
2.14.0
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
pyjwt@2.6.0
2.14.0
1
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
pyjwt@2.10.1
2.14.0
1
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
pyjwt@2.10.1
2.14.0
1
ghcr.io/microboxlabs/miot-harness:0.1.0d548e9ae4b84
pyjwt@2.13.0
2.14.0
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
pyjwt@2.8.0
2.14.0
1
ghcr.io/mlops-for-all/mlflow-tracking-server:3.8-1.30.1-v1.0.0d30e631684c3
pyjwt@2.7.0
2.14.0
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
pyjwt@2.12.1
2.14.0
1
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
pyjwt@2.13.0
2.14.0
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
pyjwt@2.10.1
2.14.0
1
ghcr.io/openrelik/openrelik-mediator:latest50ea049b2836
pyjwt@2.13.0
2.14.0
1
ghcr.io/openrelik/openrelik-server:latestee689861c980
pyjwt@2.13.0
2.14.0
1
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
pyjwt@2.13.0
2.14.0
1
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestbd496fa8c9df
pyjwt@2.13.0
2.14.0
1
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
pyjwt@2.13.0
2.14.0
1
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
pyjwt@2.13.0
2.14.0
1
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
pyjwt@2.13.0
2.14.0
1
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
pyjwt@2.13.0
2.14.0
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
pyjwt@2.13.0
2.14.0
1
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
pyjwt@2.13.0
2.14.0
1
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
pyjwt@2.7.0
2.14.0
1
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
pyjwt@2.13.0
2.14.0
1
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
pyjwt@2.13.0
2.14.0
1
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
pyjwt@2.13.0
2.14.0
1
ghcr.io/openrelik/openrelik-worker-plaso:latest8caaf6e36654
pyjwt@2.10.1
2.14.0
1
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
pyjwt@2.13.0
2.14.0
1
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
pyjwt@2.7.0
2.14.0
1
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
pyjwt@2.13.0
2.14.0
1
ghcr.io/open-telemetry/demo:3.1.0-mcp81db69cdd0b6
pyjwt@2.13.0
2.14.0
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
pyjwt@2.9.0
2.14.0
1
ghcr.io/open-telemetry/demo:3.1.0-agentd0f4ae0b32a8
pyjwt@2.13.0
2.14.0
1
ghcr.io/open-webui/mcpo:git-39b4867f06525afac6b
pyjwt@2.10.1
2.14.0
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.