StackRadar

CVE-2024-21520

Medium

Advisory

Published 26 Jun 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.011
65th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
39
of 17,781 indexed, latest versions
Container images
40
deployed by those charts
Fix available
1 of 1
affected package

Cross-site Scripting in djangorestframework

Carried by container images the latest versions of 39 of 17,781 indexed charts deploy, on 40 images.

Affected packageAffected versionsFixed inImages
djangorestframeworkpypi3.7.7, 3.11.0, 3.11.1, 3.12.1+6 more3.15.240
OSV records
GHSA-gw84-84pc-xp82
Also known as
PYSEC-2026-1304

Charts affected

39 by stars
ChartLatestAffected imagesRadar Score
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
djangorestframework@3.13.1
3.15.2

Open the chart page →

9,145
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
djangorestframework@3.14.0
3.15.2

Open the chart page →

27,267
netboxstartechnicaVerified publisher5.1.01 of 4See more

netbox startechnica 5.1.0

1 of the 4 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
djangorestframework@3.14.0
3.15.2

Open the chart page →

1,650
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
djangorestframework@3.15.1
3.15.2

Open the chart page →

17,404
openshift-secured-redisInsighteximiaitVerified publisher0.9.21 of 2See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
redislabs/redisinsight:1.14.0b03ab1426d0d
djangorestframework@3.13.1
3.15.2

Open the chart page →

13,874
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
flagsmith/flagsmith-api:v2.6.0fd58556339a4
djangorestframework@3.12.1
3.15.2

Open the chart page →

6,868
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
djangorestframework@3.13.1
3.15.2
kobotoolbox/kpi:2.022.24dbcacc01bccd4
djangorestframework@3.13.1
3.15.2

Open the chart page →

18,517
open-zaakopen-zaak0.8.01 of 3See more

open-zaak open-zaak 0.8.0

1 of the 3 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
openzaak/open-zaak:1.6.02ca2ea6e0ae9
djangorestframework@3.12.4
3.15.2

Open the chart page →

4,045
anteonanteonVerified publisher2.6.42 of 13See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
ddosify/selfhosted_backend:3.2.93c11e3182652
djangorestframework@3.15.1
3.15.2
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
djangorestframework@3.15.1
3.15.2

Open the chart page →

22,202
weblatedeliveryheroVerified publisher0.3.21 of 3See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
djangorestframework@3.11.1
3.15.2

Open the chart page →

7,984
archerydoubanVerified publisher0.4.31 of 6See more

archery douban 0.4.3

1 of the 6 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
hhyo/archery:v1.9.11aa41843419e
djangorestframework@3.13.1
3.15.2

Open the chart page →

5,853
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
djangorestframework@3.14.0
3.15.2

Open the chart page →

10,858
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
djangorestframework@3.15.1
3.15.2

Open the chart page →

1,965
paperlessgeek-cookbookVerified publisher9.2.01 of 1See more

paperless geek-cookbook 9.2.0

1 of the 1 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
djangorestframework@3.13.1
3.15.2

Open the chart page →

3,924
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
djangorestframework@3.13.1
3.15.2

Open the chart page →

7,801
open-notificatiesopen-zaak0.7.01 of 4See more

open-notificaties open-zaak 0.7.0

1 of the 4 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
openzaak/open-notificaties:1.3.02e65313b9b10
djangorestframework@3.12.4
3.15.2

Open the chart page →

2,850
verbacapverbacapVerified publisher1.0.71 of 1See more

verbacap verbacap 1.0.7

1 of the 1 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
djangorestframework@3.15.1
3.15.2

Open the chart page →

2,233
ddosifyanteonVerified publisher1.7.53 of 13See more

ddosify anteon 1.7.5

3 of the 13 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
djangorestframework@3.14.0
3.15.2
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
djangorestframework@3.15.0
3.15.2
ddosify/selfhosted_hammermanager:1.2.471b8768f49bc
djangorestframework@3.12.4
3.15.2

Open the chart page →

25,669
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
djangorestframework@3.12.2
3.15.2

Open the chart page →

22,891
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
djangorestframework@3.15.1
3.15.2

Open the chart page →

10,145
camerahubcamerahub0.10.211 of 2See more

camerahub camerahub 0.10.21

1 of the 2 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
camerahub/camerahub:0.36.23a5af37dd6e1b
djangorestframework@3.14.0
3.15.2

Open the chart page →

2,507
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
djangorestframework@3.12.4
3.15.2

Open the chart page →

12,457
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
djangorestframework@3.12.4
3.15.2

Open the chart page →

12,131
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
djangorestframework@3.12.4
3.15.2

Open the chart page →

11,592
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
djangorestframework@3.13.1
3.15.2

Open the chart page →

16,069
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
djangorestframework@3.15.1
3.15.2

Open the chart page →

11,335
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
djangorestframework@3.14.0
3.15.2

Open the chart page →

14,856
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
djangorestframework@3.14.0
3.15.2

Open the chart page →

24,917
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
djangorestframework@3.11.1
3.15.2

Open the chart page →

25,122
babybuddygeek-cookbookVerified publisher1.2.21 of 1See more

babybuddy geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
linuxserver/babybuddy:1.10.2f7d7c7704249
djangorestframework@3.13.1
3.15.2

Open the chart page →

1,489
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
djangorestframework@3.11.1
3.15.2

Open the chart page →

24,293
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
djangorestframework@3.11.1
3.15.2

Open the chart page →

7,984
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
djangorestframework@3.14.0
3.15.2

Open the chart page →

16,384
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
djangorestframework@3.12.2
3.15.2

Open the chart page →

16,417
comacopencord1.0.02 of 9See more

comac opencord 1.0.0

2 of the 9 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
djangorestframework@3.7.7
3.15.2
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
djangorestframework@3.7.7
3.15.2

Open the chart page →

88,546
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
djangorestframework@3.7.7
3.15.2

Open the chart page →

26,211
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
djangorestframework@3.11.1
3.15.2

Open the chart page →

22,084
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
djangorestframework@3.11.0
3.15.2

Open the chart page →

8,694
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-21520.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
djangorestframework@3.13.1
3.15.2

Open the chart page →

3,392

Container images carrying it

40 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
cloudve/cloudlaunch-server:latest4a3d7fae90bb
djangorestframework@3.12.4
3.15.2
3
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
djangorestframework@3.7.7
3.15.2
2
weblate/weblate:4.2.2-169c160d37a3c
djangorestframework@3.11.1
3.15.2
2
baserow/backend:1.31.1e0b3c8130b91
djangorestframework@3.15.1
3.15.2
1
baserow/baserow:1.30.1df0c42eb67e8
djangorestframework@3.15.1
3.15.2
1
camerahub/camerahub:0.36.23a5af37dd6e1b
djangorestframework@3.14.0
3.15.2
1
codecov/self-hosted-api:24.4.10475cb1c3136
djangorestframework@3.14.0
3.15.2
1
datamate/seafile-professional:11.0.202dd66b722464
djangorestframework@3.14.0
3.15.2
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
djangorestframework@3.14.0
3.15.2
1
ddosify/selfhosted_backend:3.2.93c11e3182652
djangorestframework@3.15.1
3.15.2
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
djangorestframework@3.15.0
3.15.2
1
ddosify/selfhosted_hammermanager:1.2.471b8768f49bc
djangorestframework@3.12.4
3.15.2
1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
djangorestframework@3.15.1
3.15.2
1
flagsmith/flagsmith-api:v2.6.0fd58556339a4
djangorestframework@3.12.1
3.15.2
1
galaxy/cloudman-server:lateste5c265fe9fcd
djangorestframework@3.13.1
3.15.2
1
gethue/hue:4.11.011b649636e68
djangorestframework@3.12.2
3.15.2
1
gethue/hue:4.10.05702b2c37ff9
djangorestframework@3.12.2
3.15.2
1
hhyo/archery:v1.9.11aa41843419e
djangorestframework@3.13.1
3.15.2
1
kobotoolbox/kobocat:2.022.24ab15679454415
djangorestframework@3.13.1
3.15.2
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
djangorestframework@3.13.1
3.15.2
1
kporwit/vinyl_lib_app:v0.1.1217de0302218
djangorestframework@3.13.1
3.15.2
1
linuxserver/babybuddy:1.10.2f7d7c7704249
djangorestframework@3.13.1
3.15.2
1
netboxcommunity/netbox:v3.2.83d652dca5351
djangorestframework@3.13.1
3.15.2
1
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
djangorestframework@3.14.0
3.15.2
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
djangorestframework@3.7.7
3.15.2
1
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
djangorestframework@3.15.1
3.15.2
1
openzaak/open-notificaties:1.3.02e65313b9b10
djangorestframework@3.12.4
3.15.2
1
openzaak/open-zaak:1.6.02ca2ea6e0ae9
djangorestframework@3.12.4
3.15.2
1
redislabs/redisinsight:1.14.0b03ab1426d0d
djangorestframework@3.13.1
3.15.2
1
seafileltd/seafile-mc:9.0.106693911bcc40
djangorestframework@3.11.1
3.15.2
1
seafileltd/seafile-mc:10.0.170628f29c663
djangorestframework@3.14.0
3.15.2
1
seafileltd/seafile-mc:9.0.97ac833196f60
djangorestframework@3.11.1
3.15.2
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
djangorestframework@3.14.0
3.15.2
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
djangorestframework@3.11.1
3.15.2
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
djangorestframework@3.13.1
3.15.2
1
weblate/weblate:3.11.3-182848df56ecd
djangorestframework@3.11.0
3.15.2
1
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
djangorestframework@3.15.1
3.15.2
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
djangorestframework@3.15.1
3.15.2
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
djangorestframework@3.13.1
3.15.2
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
djangorestframework@3.14.0
3.15.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.