StackRadar

CVE-2022-36359

High

Advisory

Published 3 Aug 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.008
55th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
30
of 17,781 indexed, latest versions
Container images
28
deployed by those charts
Fix available
1 of 1
affected package

Django vulnerable to Reflected File Download attack

Carried by container images the latest versions of 30 of 17,781 indexed charts deploy, on 28 images.

Affected packageAffected versionsFixed inImages
djangopypi1.11.11, 1.11.24, 1.11.29, 2.2.13+20 more3.2.15, 4.0.728
OSV records
GHSA-8x94-hmjh-97hq
Also known as
BIT-django-2022-36359, PYSEC-2022-245

Charts affected

30 by stars
ChartLatestAffected imagesRadar Score
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
django@2.2.13
3.2.15

Open the chart page →

30,326
taigarc-helm-charts0.1.01 of 7See more

taiga rc-helm-charts 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
taigaio/taiga-back:6.4.29f97323cc150
django@2.2.24
3.2.15

Open the chart page →

7,255
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
flagsmith/flagsmith-api:v2.6.0fd58556339a4
django@2.2.17
3.2.15

Open the chart page →

6,868
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
django@2.2.28
3.2.15
kobotoolbox/kpi:2.022.24dbcacc01bccd4
django@2.2.27
3.2.15

Open the chart page →

18,517
open-zaakopen-zaak0.8.01 of 3See more

open-zaak open-zaak 0.8.0

1 of the 3 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
openzaak/open-zaak:1.6.02ca2ea6e0ae9
django@3.2.12
3.2.15

Open the chart page →

4,045
weblatedeliveryheroVerified publisher0.3.21 of 3See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
django@3.1.1
3.2.15

Open the chart page →

7,984
healthchecksgeek-cookbookVerified publisher4.4.21 of 1See more

healthchecks geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
linuxserver/healthchecks:version-v1.20.050792a72fc71
django@3.2
3.2.15

Open the chart page →

1,667
paperlessgeek-cookbookVerified publisher9.2.01 of 1See more

paperless geek-cookbook 9.2.0

1 of the 1 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
django@4.0.6
4.0.7

Open the chart page →

3,924
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
django@3.2.11
3.2.15

Open the chart page →

7,801
helm-taigamvitale1989-helm-taigaVerified publisher0.2.51 of 2See more

helm-taiga mvitale1989-helm-taiga 0.2.5

1 of the 2 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
django@1.11.24
3.2.15

Open the chart page →

5,104
open-notificatiesopen-zaak0.7.01 of 4See more

open-notificaties open-zaak 0.7.0

1 of the 4 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
openzaak/open-notificaties:1.3.02e65313b9b10
django@3.2.12
3.2.15

Open the chart page →

2,850
shynetatrox0.1.11 of 1See more

shynet atrox 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.12.0e821e31140f7
django@3.2.10
3.2.15

Open the chart page →

5,507
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
django@3.2.4
3.2.15

Open the chart page →

22,891
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
django@3.2.9
3.2.15

Open the chart page →

12,457
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
django@3.2.9
3.2.15

Open the chart page →

12,131
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
django@3.2.9
3.2.15

Open the chart page →

11,592
devops-diplomdevops-diplom-chartVerified publisher0.8.01 of 2See more

devops-diplom devops-diplom-chart 0.8.0

1 of the 2 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
alexeyr7/sf-test-app:latestdf0b41fdbd53
django@4.0.5
4.0.7

Open the chart page →

2,548
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
django@3.2.14
3.2.15

Open the chart page →

25,122
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
django@3.2.8
3.2.15

Open the chart page →

64,489
babybuddygeek-cookbookVerified publisher1.2.21 of 1See more

babybuddy geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
linuxserver/babybuddy:1.10.2f7d7c7704249
django@4.0.2
4.0.7

Open the chart page →

1,489
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
django@2.2.14
3.2.15

Open the chart page →

24,293
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
django@3.1.1
3.2.15

Open the chart page →

7,984
archiveboxhelmforgeVerified publisher1.1.121 of 1See more

archivebox helmforge 1.1.12

1 of the 1 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
archivebox/archivebox:0.7.41a5a37331091
django@3.1.14
3.2.15

Open the chart page →

7,633
erpnextimprowisedVerified publisher3.3.01 of 3See more

erpnext improwised 3.3.0

1 of the 3 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
improwised/erpnext-worker:v13.4.197280b55cbd4
django@1.11.29
3.2.15

Open the chart page →

6,501
large-systems-djangolarge-systems-djangoVerified publisher1.0.01 of 1See more

large-systems-django large-systems-django 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
ha33ona/python:test6affdfc644d0
django@2.2.26
3.2.15

Open the chart page →

3,891
comacopencord1.0.02 of 9See more

comac opencord 1.0.0

2 of the 9 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
django@1.11.11
3.2.15
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
django@1.11.11
3.2.15

Open the chart page →

88,546
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
django@1.11.11
3.2.15

Open the chart page →

26,211
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
django@3.2.14
3.2.15

Open the chart page →

22,084
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
django@3.0.4
3.2.15

Open the chart page →

8,694
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-36359.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
django@4.0.5
4.0.7

Open the chart page →

3,392

Container images carrying it

28 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
cloudve/cloudlaunch-server:latest4a3d7fae90bb
django@3.2.9
3.2.15
3
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
django@1.11.11
3.2.15
2
weblate/weblate:4.2.2-169c160d37a3c
django@3.1.1
3.2.15
2
alexeyr7/sf-test-app:latestdf0b41fdbd53
django@4.0.5
4.0.7
1
archivebox/archivebox:0.7.41a5a37331091
django@3.1.14
3.2.15
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
django@3.2.8
3.2.15
1
flagsmith/flagsmith-api:v2.6.0fd58556339a4
django@2.2.17
3.2.15
1
gethue/hue:4.10.05702b2c37ff9
django@3.2.4
3.2.15
1
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
django@2.2.13
3.2.15
1
ha33ona/python:test6affdfc644d0
django@2.2.26
3.2.15
1
improwised/erpnext-worker:v13.4.197280b55cbd4
django@1.11.29
3.2.15
1
kobotoolbox/kobocat:2.022.24ab15679454415
django@2.2.28
3.2.15
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
django@2.2.27
3.2.15
1
kporwit/vinyl_lib_app:v0.1.1217de0302218
django@4.0.5
4.0.7
1
linuxserver/babybuddy:1.10.2f7d7c7704249
django@4.0.2
4.0.7
1
linuxserver/healthchecks:version-v1.20.050792a72fc71
django@3.2
3.2.15
1
milesmcc/shynet:v0.12.0e821e31140f7
django@3.2.10
3.2.15
1
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
django@1.11.24
3.2.15
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
django@1.11.11
3.2.15
1
openzaak/open-notificaties:1.3.02e65313b9b10
django@3.2.12
3.2.15
1
openzaak/open-zaak:1.6.02ca2ea6e0ae9
django@3.2.12
3.2.15
1
seafileltd/seafile-mc:9.0.106693911bcc40
django@3.2.14
3.2.15
1
seafileltd/seafile-mc:9.0.97ac833196f60
django@3.2.14
3.2.15
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
django@2.2.14
3.2.15
1
taigaio/taiga-back:6.4.29f97323cc150
django@2.2.24
3.2.15
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
django@3.2.11
3.2.15
1
weblate/weblate:3.11.3-182848df56ecd
django@3.0.4
3.2.15
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
django@4.0.6
4.0.7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.