StackRadar

GHSA-pxh4-856f-4h89

High

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
High
worst across findings
CVSS
7.4
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
326
of 18,232 indexed, latest versions
Container images
338
deployed by those charts
Fix available
1 of 1
affected package

PyJWT: HS256/384/512 verify accepts empty HMAC key via oct JWK (PyJWK/PyJWKClient) enabling token forgery

Carried by container images the latest versions of 326 of 18,232 indexed charts deploy, on 338 images.

Affected packageAffected versionsFixed inImages
pyjwtpypi1.4.2, 1.5.3, 1.6.1, 1.6.4+17 more2.14.0338
OSV records
GHSA-pxh4-856f-4h89

Charts affected

326 by stars
ChartLatestAffected imagesRadar Score
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

78,513
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

79,541
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

79,541
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

79,541
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

78,513
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

78,513
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0

Open the chart page →

79,541
smtpsmtpVerified publisher1.3.31 of 1See more

smtp smtp 1.3.3

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
pyjwt@2.10.1
2.14.0

Open the chart page →

2,010
srebotsrebot0.14.01 of 2See more

srebot srebot 0.14.0

1 of the 2 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/shadrus/srebot:0.14.09b4415e937b2
pyjwt@2.11.0
2.14.0

Open the chart page →

1,876
servicexssl-hep1.8.61 of 16See more

servicex ssl-hep 1.8.6

1 of the 16 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
sslhep/servicex_app:v1.8.6c935e123030d
pyjwt@2.13.0
2.14.0

Open the chart page →

67,074
artifactory-cleanupsubshellVerified publisher1.0.11 of 1See more

artifactory-cleanup subshell 1.0.1

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
devopshq/artifactory-cleanup:1.0.1830e093bffa91
pyjwt@2.10.1
2.14.0

Open the chart page →

2,881
substra-backendsubstraVerified publisher26.15.31 of 7See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-backend:1.0.121967f54ec86
pyjwt@2.9.0
2.14.0

Open the chart page →

5,346
uptime-kumasupporttools2.6.01 of 3See more

uptime-kuma supporttools 2.6.0

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
supporttools/uptime-kuma:v2.6f8a49ed65809
pyjwt@1.7.0
2.14.0

Open the chart page →

5,500
tarkatarkaOfficialVerified publisher0.4.11 of 4See more

tarka tarka 0.4.1

1 of the 4 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/tarkyaio/tarka:0.4.1e8d3f1512f06
pyjwt@2.12.1
2.14.0

Open the chart page →

4,178
the0the0Verified publisher0.15.11 of 9See more

the0 the0 0.15.1

1 of the 9 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/alexanderwanyoike/the0/runtime:1.20.105ea40f8bc15
pyjwt@2.7.0
2.14.0

Open the chart page →

7,411
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
pyjwt@2.4.0
2.14.0

Open the chart page →

10,140
nemo-guardrailsupstreamyardVerified publisher0.1.11 of 1See more

nemo-guardrails upstreamyard 0.1.1

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
upstreamyard/nemo-guardrails:0.24.19f673183cfc0
pyjwt@2.13.0
2.14.0

Open the chart page →

1,867
uptime-platformuptime-platformVerified publisher0.1.31 of 3See more

uptime-platform uptime-platform 0.1.3

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
sashastudent/uptime-platform:latest37a82b4e598e
pyjwt@2.13.0
2.14.0

Open the chart page →

971
vaultwardenvaultwarden-helmVerified publisher1.2.71 of 2See more

vaultwarden vaultwarden-helm 1.2.7

1 of the 2 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/postgresql:18.4-system-trixie42708a75345b
pyjwt@2.13.0
2.14.0

Open the chart page →

2,302
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.252cb72a9e3da
pyjwt@2.10.1
2.14.0

Open the chart page →

6,890
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
pyjwt@2.7.0
2.14.0

Open the chart page →

5,414
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
pyjwt@2.3.0
2.14.0

Open the chart page →

72,635
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.45a065930682d
pyjwt@2.10.1
2.14.0

Open the chart page →

7,539
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
pyjwt@2.4.0
2.14.0

Open the chart page →

78,312
juicefs-csi-driverwener0.33.11 of 5See more

juicefs-csi-driver wener 0.33.1

1 of the 5 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.33.1103ac60b6b9c
pyjwt@2.6.0
2.14.0

Open the chart page →

33,783
juicefs-csi-driverwenerme0.33.11 of 5See more

juicefs-csi-driver wenerme 0.33.1

1 of the 5 container images this version deploys carry GHSA-pxh4-856f-4h89.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.33.1103ac60b6b9c
pyjwt@2.6.0
2.14.0

Open the chart page →

33,783

Container images carrying it

338 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
oomk8s/readiness-check:2.0.2875814cc853d
pyjwt@1.7.1
2.14.0
11
apache/superset:6.1.0:latest16b50bbef664
pyjwt@2.10.1
2.14.0
3
cloudve/cloudlaunch-server:latest4a3d7fae90bb
pyjwt@2.3.0
2.14.0
3
dpage/pgadmin4:6.12781369df9994
pyjwt@2.4.0
2.14.0
3
amancevice/superset:0.35.212a0a9e66550
pyjwt@1.7.1
2.14.0
2
cs3org/wopiserver:v9.4.202a9e78757b4
pyjwt@2.6.0
2.14.0
2
frinx/topology-discovery:7.0.37832e3589dba
pyjwt@2.9.0
2.14.0
2
ilum/api:6.7.3624fd09528c8
pyjwt@2.13.0
2.14.0
2
juicedata/juicefs-csi-driver:v0.33.1103ac60b6b9c
pyjwt@2.6.0
2.14.0
2
larribas/mlflow:1.9.105ccb0b46bfb
pyjwt@1.7.1
2.14.0
2
louislam/uptime-kuma:1.23.1396510915e6be
pyjwt@1.7.0
2.14.0
2
louislam/uptime-kuma:2.5.69912da7d7d9b
pyjwt@2.6.0
2.14.0
2
louislam/uptime-kuma:2.3.29aeb4e51d038
pyjwt@2.6.0
2.14.0
2
opencsghq/label-studio:v2.6.01f6764097129
pyjwt@2.10.1
2.14.0
2
seafileltd/seafile-mc:11.0.12d0c66e4621bd
pyjwt@2.6.0
2.14.0
2
weblate/weblate:4.2.2-169c160d37a3c
pyjwt@1.7.1
2.14.0
2
ghcr.io/cloudnative-pg/postgresql:18.4-system-trixie42708a75345b
pyjwt@2.13.0
2.14.0
2
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
pyjwt@2.13.0
2.14.0
2
ghcr.io/games-on-whales/xorg:1.0.0305b3327ebba
pyjwt@1.7.1
2.14.0
2
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
pyjwt@2.13.0
2.14.0
2
airbyte/manifest-server:7.28.2deec511b51c3
pyjwt@2.10.1
2.14.0
1
akeyless/base:latest759e4289fae8
pyjwt@2.12.0
2.14.0
1
akeyless/base-rhel:0.0.14ba8900a0061
pyjwt@2.6.0
2.14.0
1
akeyless/gateway:5.5.30f582fc294a0
pyjwt@2.13.0
2.14.0
1
alerta/alerta-web:8.5.04786b9eaa606
pyjwt@2.1.0
2.14.0
1
allegroai/clearml:2.0.0-613713ae38f7daf
pyjwt@2.8.0
2.14.0
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
pyjwt@2.0.1
2.14.0
1
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
pyjwt@2.4.0
2.14.0
1
allegroai/clearml-serving-statistics:1.3.0c58d9da7bdf8
pyjwt@2.4.0
2.14.0
1
amancevice/superset:0.28.1c8c04bfe3d66
pyjwt@1.7.1
2.14.0
1
amundsendev/amundsen-frontend:2.1.169e7915e61c1
pyjwt@1.7.1
2.14.0
1
andrcuns/dependabot-gitlab:7.11.0-alpha.1a783b497f3f8
pyjwt@2.7.0
2.14.0
1
apache/airflow:2.8.4-python3.964e58748b6b9
pyjwt@2.8.0
2.14.0
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
pyjwt@2.9.0
2.14.0
1
apache/airflow:2.8.1e5560ad0b86e
pyjwt@2.8.0
2.14.0
1
apache/hertzbeat:1.8.075d48a62748f
pyjwt@2.7.0
2.14.0
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
pyjwt@2.7.0
2.14.0
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
pyjwt@2.2.0
2.14.0
1
apache/superset:4.0.1ab9467fd712c
pyjwt@2.4.0
2.14.0
1
apache/tika:2.9.2.1-fullae0b86d3c4d0
pyjwt@2.7.0
2.14.0
1
apache/tika:latest-fulld69fab827fa0
pyjwt@2.10.1
2.14.0
1
apache/tika:3.2.2.0-fullffab324253ed
pyjwt@2.10.1
2.14.0
1
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
pyjwt@2.10.1
2.14.0
1
aristidetm/k8s-hub:3.3.7ccb516cb8474
pyjwt@2.8.0
2.14.0
1
baserow/backend:1.31.1e0b3c8130b91
pyjwt@2.8.0
2.14.0
1
baserow/baserow:1.30.1df0c42eb67e8
pyjwt@2.8.0
2.14.0
1
bcgovimages/aries-cloudagent:py36-1.16-1_0.7.4faa2e2d21916
pyjwt@2.4.0
2.14.0
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
pyjwt@2.10.1
2.14.0
1
bmeares/meerschaum:2.8.48e9c5bacaa82
pyjwt@2.10.1
2.14.0
1
boky/postfix:5.1.0:v5.1.0aafc77238423
pyjwt@2.10.1
2.14.0
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.