StackRadar

CVE-2024-56374

Medium

Advisory

Published 14 Jan 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.8
base score, highest
EPSS
0.019
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
16
of 17,781 indexed, latest versions
Container images
17
deployed by those charts
Fix available
1 of 1
affected package

Django has a potential denial-of-service vulnerability in IPv6 validation

Carried by container images the latest versions of 16 of 17,781 indexed charts deploy, on 17 images.

Affected packageAffected versionsFixed inImages
djangopypi4.2, 4.2.7, 4.2.11, 4.2.15+7 more4.2.18, 5.0.11, 5.1.517
OSV records
GHSA-qcgg-j2x8-h9g8
Also known as
BIT-django-2024-56374, PYSEC-2025-1

Charts affected

16 by stars
ChartLatestAffected imagesRadar Score
netboxstartechnicaVerified publisher5.1.01 of 4See more

netbox startechnica 5.1.0

1 of the 4 container images this version deploys carry CVE-2024-56374.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
django@4.2.11
4.2.18

Open the chart page →

1,650
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2024-56374.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
django@5.0.9
5.0.11

Open the chart page →

17,404
healthchecksgabe565Verified publisher0.17.01 of 1See more

healthchecks gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2024-56374.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
django@5.1.4
5.1.5

Open the chart page →

2,286
psonoankra-chartsVerified publisher1.2.01 of 2See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2024-56374.

Container imageDigestPackageFixed in
psono/psono-server:5.0.03b974b43ea03
django@4.2.16
4.2.18

Open the chart page →

2,388
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry CVE-2024-56374.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
django@5.0.7
5.0.11

Open the chart page →

22,202
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2024-56374.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
django@5.1.1
5.1.5

Open the chart page →

13,761
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2024-56374.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
django@4.2.15
4.2.18

Open the chart page →

10,858
healthchecksstackhelmVerified publisher0.1.01 of 2See more

healthchecks stackhelm 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-56374.

Container imageDigestPackageFixed in
healthchecks/healthchecks:v2.8.1e82bb0836e30
django@4.2
4.2.18

Open the chart page →

2,236
verbacapverbacapVerified publisher1.0.71 of 1See more

verbacap verbacap 1.0.7

1 of the 1 container images this version deploys carry CVE-2024-56374.

Container imageDigestPackageFixed in
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
django@5.0.4
5.0.11

Open the chart page →

2,233
ddosifyanteonVerified publisher1.7.51 of 13See more

ddosify anteon 1.7.5

1 of the 13 container images this version deploys carry CVE-2024-56374.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
django@4.2.11
4.2.18

Open the chart page →

25,669
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2024-56374.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
django@5.0.9
5.0.11

Open the chart page →

10,145
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2024-56374.

Container imageDigestPackageFixed in
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
django@5.0.3
5.0.11

Open the chart page →

11,335
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2024-56374.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
django@5.1.1
5.1.5

Open the chart page →

6,075
codecovdoubanVerified publisher0.2.42 of 8See more

codecov douban 0.2.4

2 of the 8 container images this version deploys carry CVE-2024-56374.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
django@4.2.7
4.2.18
codecov/self-hosted-worker:24.4.1837f546b479b
django@4.2.11
4.2.18

Open the chart page →

24,917
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2024-56374.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
django@4.2.7
4.2.18

Open the chart page →

16,384
substra-backendsubstraVerified publisher26.15.31 of 7See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry CVE-2024-56374.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-backend:1.0.121967f54ec86
django@4.2.16
4.2.18

Open the chart page →

4,731

Container images carrying it

17 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
baserow/backend:1.31.1e0b3c8130b91
django@5.0.9
5.0.11
1
baserow/baserow:1.30.1df0c42eb67e8
django@5.0.9
5.0.11
1
codecov/self-hosted-api:24.4.10475cb1c3136
django@4.2.7
4.2.18
1
codecov/self-hosted-worker:24.4.1837f546b479b
django@4.2.11
4.2.18
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
django@4.2.11
4.2.18
1
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
django@5.0.7
5.0.11
1
healthchecks/healthchecks:v2.8.1e82bb0836e30
django@4.2
4.2.18
1
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
django@4.2.11
4.2.18
1
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
django@5.0.3
5.0.11
1
psono/psono-server:5.0.03b974b43ea03
django@4.2.16
4.2.18
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
django@4.2.15
4.2.18
1
sissbruecker/linkding:1.35.00c5dddf0b37c
django@5.1.1
5.1.5
1
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
django@5.1.4
5.1.5
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
django@5.0.4
5.0.11
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
django@5.1.1
5.1.5
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
django@4.2.7
4.2.18
1
ghcr.io/substra/substra-backend:1.0.121967f54ec86
django@4.2.16
4.2.18
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.