StackRadar

CVE-2024-6827

High

Advisory

Published 20 Mar 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
126
of 17,781 indexed, latest versions
Container images
137
deployed by those charts
Fix available
1 of 1
affected package

Gunicorn HTTP Request/Response Smuggling vulnerability

Carried by container images the latest versions of 126 of 17,781 indexed charts deploy, on 137 images.

Affected packageAffected versionsFixed inImages
gunicornpypi19.6.0, 19.7.1, 19.8.0, 19.8.1+5 more22.0.0137
OSV records
GHSA-hc5x-x2vx-497g
Also known as
PYSEC-2026-1433

Charts affected

126 by stars
ChartLatestAffected imagesRadar Score
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
gunicorn@20.1.0
22.0.0

Open the chart page →

12,457
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
gunicorn@20.1.0
22.0.0

Open the chart page →

12,131
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
gunicorn@20.1.0
22.0.0

Open the chart page →

11,592
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
gunicorn@20.1.0
22.0.0

Open the chart page →

16,069
kfservingcowboysysopVerified publisher1.3.11 of 3See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
kfserving/models-web-app:v0.6.1f322d6ffdfa3
gunicorn@20.1.0
22.0.0

Open the chart page →

3,830
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
gunicorn@20.0.4
22.0.0

Open the chart page →

27,728
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
gunicorn@20.0.4
22.0.0

Open the chart page →

18,863
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
gunicorn@20.0.4
22.0.0

Open the chart page →

24,335
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
gunicorn@20.0.4
22.0.0

Open the chart page →

4,422
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
gunicorn@20.1.0
22.0.0

Open the chart page →

14,856
design-cataloguedesign-catalogue0.1.01 of 2See more

design-catalogue design-catalogue 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
gunicorn@20.0.4
22.0.0

Open the chart page →

2,770
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
gunicorn@20.1.0
22.0.0

Open the chart page →

24,917
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
gunicorn@20.1.0
22.0.0

Open the chart page →

4,550
amundsenduyet1.1.03 of 7See more

amundsen duyet 1.1.0

3 of the 7 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
gunicorn@20.0.4
22.0.0
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
gunicorn@20.0.4
22.0.0
amundsendev/amundsen-search:2.4.099dda9502c3e
gunicorn@20.0.4
22.0.0

Open the chart page →

11,174
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
gunicorn@20.1.0
22.0.0

Open the chart page →

25,122
escvmschedulerescvmscheduler1.0.71 of 3See more

escvmscheduler escvmscheduler 1.0.7

1 of the 3 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
swisscomcloud/esc-vm-scheduler-web:latestb6639d1a922e
gunicorn@20.1.0
22.0.0

Open the chart page →

4,678
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
gunicorn@20.1.0
22.0.0

Open the chart page →

4,085
infrafibonacci-cluster-infraVerified publisher1.0.01 of 4See more

infra fibonacci-cluster-infra 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
dpage/pgadmin4:8.418cd5711fc9a
gunicorn@20.1.0
22.0.0

Open the chart page →

12,454
bae-activation-servicefiware0.1.21 of 1See more

bae-activation-service fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
fiware/bae-activation-service:v0.0.33e3ec88d59ed
gunicorn@20.0.4
22.0.0

Open the chart page →

3,186
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
gunicorn@20.1.0
22.0.0

Open the chart page →

64,489
ishare-satellitefiware1.3.21 of 1See more

ishare-satellite fiware 1.3.2

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
fiware/ishare-satellite:1.2.0c3c1c8ccfb45
gunicorn@20.1.0
22.0.0

Open the chart page →

1,778
forms-catalogueforms-catalogue0.1.01 of 2See more

forms-catalogue forms-catalogue 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
gunicorn@20.1.0
22.0.0

Open the chart page →

2,188
powerdnsfsdrw080.1.31 of 4See more

powerdns fsdrw08 0.1.3

1 of the 4 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:latest9898a7cf37d2
gunicorn@20.0.4
22.0.0

Open the chart page →

1,958
spectergaloymoney0.3.11 of 1See more

specter galoymoney 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
lncm/specter-desktop:v1.10.536eaa06f99f4
gunicorn@20.1.0
22.0.0

Open the chart page →

1,691
spectergaloymoney20.3.11 of 1See more

specter galoymoney2 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
lncm/specter-desktop:v1.10.536eaa06f99f4
gunicorn@20.1.0
22.0.0

Open the chart page →

1,691
babybuddygeek-cookbookVerified publisher1.2.21 of 1See more

babybuddy geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
linuxserver/babybuddy:1.10.2f7d7c7704249
gunicorn@20.1.0
22.0.0

Open the chart page →

1,489
ihatemoneygeek-cookbookVerified publisher1.1.21 of 1See more

ihatemoney geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
ihatemoney/ihatemoney:5.2.0457fda1feb32
gunicorn@20.1.0
22.0.0

Open the chart page →

1,526
powerdns-admingeek-cookbookVerified publisher1.2.21 of 1See more

powerdns-admin geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
gunicorn@20.0.4
22.0.0

Open the chart page →

2,643
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
gunicorn@20.1.0
22.0.0

Open the chart page →

24,293
gmaas-github-apigmaas-github-api2.0.11 of 1See more

gmaas-github-api gmaas-github-api 2.0.1

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
gmaas2/github-api:latest148fc2d9afe9
gunicorn@20.1.0
22.0.0

Open the chart page →

1,205
resurrectbothalkeye0.1.51 of 1See more

resurrectbot halkeye 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
halkeye/slack-resurrect:v0.1.477b05e95fdb5
gunicorn@19.9.0
22.0.0

Open the chart page →

3,809
ms-hello-pythonhello-python-helm0.1.11 of 1See more

ms-hello-python hello-python-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
irakli/ms-hello-python:latest9e7a91ba9ae0
gunicorn@20.0.4
22.0.0

Open the chart page →

891
mlflowhelm-charts-nr1.0.101 of 1See more

mlflow helm-charts-nr 1.0.10

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
gunicorn@20.0.4
22.0.0

Open the chart page →

4,422
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
gunicorn@21.2.0
22.0.0

Open the chart page →

16,384
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
gunicorn@20.1.0
22.0.0

Open the chart page →

8,685
activation-servicei4trustVerified publisher2.3.11 of 1See more

activation-service i4trust 2.3.1

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
i4trust/activation-service:2.2.09f3719176893
gunicorn@20.1.0
22.0.0

Open the chart page →

2,058
erpnextimprowisedVerified publisher3.3.01 of 3See more

erpnext improwised 3.3.0

1 of the 3 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
improwised/erpnext-worker:v13.4.197280b55cbd4
gunicorn@20.1.0
22.0.0

Open the chart page →

6,501
ingress-dashboardingress-dashboard0.1.11 of 3See more

ingress-dashboard ingress-dashboard 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
taemon1337/image-api:0.0.1247bc1dc4f07
gunicorn@20.1.0
22.0.0

Open the chart page →

4,542
redashinseefrlab2.1.01 of 3See more

redash inseefrlab 2.1.0

1 of the 3 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
redash/redash:10.0.0.b503639392753c0376
gunicorn@20.0.4
22.0.0

Open the chart page →

3,314
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization-streaming:3.01a89327e499b
gunicorn@20.1.0
22.0.0

Open the chart page →

11,069
guestbookjakuboskera0.2.01 of 3See more

guestbook jakuboskera 0.2.0

1 of the 3 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
jakuboskera/guestbook:v0.3.04989afa06e74
gunicorn@20.1.0
22.0.0

Open the chart page →

1,090
todojakuboskera0.1.11 of 1See more

todo jakuboskera 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
jakuboskera/todo:v0.2.3714b1adbbc2d
gunicorn@20.1.0
22.0.0

Open the chart page →

801
http-reqtracejulb-meVerified publisher1.0.41 of 1See more

http-reqtrace julb-me 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
julb/http-reqtrace:1.1.00806409af397
gunicorn@20.0.4
22.0.0

Open the chart page →

1,854
shynetjuniorjpdj0.1.301 of 1See more

shynet juniorjpdj 0.1.30

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.13.1ba54f7797a6b
gunicorn@20.1.0
22.0.0

Open the chart page →

2,581
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
gunicorn@19.9.0
22.0.0

Open the chart page →

16,417
mlflowkelvins0.4.01 of 3See more

mlflow kelvins 0.4.0

1 of the 3 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
kelvinsp/mlflow:1.26.1cd33e6db2a59
gunicorn@20.1.0
22.0.0

Open the chart page →

4,156
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
gunicorn@19.9.0
22.0.0

Open the chart page →

14,813
large-systems-djangolarge-systems-djangoVerified publisher1.0.01 of 1See more

large-systems-django large-systems-django 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
ha33ona/python:test6affdfc644d0
gunicorn@19.9.0
22.0.0

Open the chart page →

3,891
exposureloglsst-sqre0.2.11 of 1See more

exposurelog lsst-sqre 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
lsstsqre/exposurelog:0.8.079b00fb67a65
gunicorn@20.1.0
22.0.0

Open the chart page →

2,078
python-api-postgresmiltex0.0.11 of 2See more

python-api-postgres miltex 0.0.1

1 of the 2 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
miltex/python-api:1.0.0dab12a7748d5
gunicorn@20.1.0
22.0.0

Open the chart page →

2,347

Container images carrying it

137 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
gunicorn@20.0.4
22.0.0
1
gethue/hue:4.11.011b649636e68
gunicorn@19.9.0
22.0.0
1
gethue/hue:4.10.05702b2c37ff9
gunicorn@19.9.0
22.0.0
1
gmaas2/github-api:latest148fc2d9afe9
gunicorn@20.1.0
22.0.0
1
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
gunicorn@20.0.4
22.0.0
1
ha33ona/python:test6affdfc644d0
gunicorn@19.9.0
22.0.0
1
halkeye/slack-resurrect:v0.1.477b05e95fdb5
gunicorn@19.9.0
22.0.0
1
hhyo/archery:v1.9.11aa41843419e
gunicorn@20.0.4
22.0.0
1
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
gunicorn@20.1.0
22.0.0
1
i4trust/activation-service:2.2.09f3719176893
gunicorn@20.1.0
22.0.0
1
ihatemoney/ihatemoney:5.2.0457fda1feb32
gunicorn@20.1.0
22.0.0
1
improwised/erpnext-worker:v13.4.197280b55cbd4
gunicorn@20.1.0
22.0.0
1
intel/multimodal-data-visualization-streaming:3.01a89327e499b
gunicorn@20.1.0
22.0.0
1
irakli/ms-hello-python:latest9e7a91ba9ae0
gunicorn@20.0.4
22.0.0
1
istio/examples-helloworld-v1:latest328b237e4fb1
gunicorn@21.2.0
22.0.0
1
istio/examples-helloworld-v2:latest0a7f02b2c7c9
gunicorn@21.2.0
22.0.0
1
jakuboskera/guestbook:v0.3.04989afa06e74
gunicorn@20.1.0
22.0.0
1
jakuboskera/todo:v0.2.3714b1adbbc2d
gunicorn@20.1.0
22.0.0
1
julb/alertmanager-gchat-integration:1.0.5837c4038a0dd
gunicorn@20.0.4
22.0.0
1
julb/http-reqtrace:1.1.00806409af397
gunicorn@20.0.4
22.0.0
1
kelvinsp/mlflow:1.26.1cd33e6db2a59
gunicorn@20.1.0
22.0.0
1
kennethreitz/httpbin:latest599fe5e50731
gunicorn@19.9.0
22.0.0
1
kfserving/models-web-app:v0.6.1f322d6ffdfa3
gunicorn@20.1.0
22.0.0
1
kserve/models-web-app:v0.8.063ea05e73842
gunicorn@20.1.0
22.0.0
1
kubeflownotebookswg/jupyter-web-app:v1.6.1d762690e21c1
gunicorn@20.1.0
22.0.0
1
kubeflownotebookswg/tensorboards-web-app:v1.6.10876fef1973b
gunicorn@20.1.0
22.0.0
1
kubeflownotebookswg/volumes-web-app:v1.6.17299fa94db15
gunicorn@20.1.0
22.0.0
1
linuxserver/babybuddy:1.10.2f7d7c7704249
gunicorn@20.1.0
22.0.0
1
lsstsqre/exposurelog:0.8.079b00fb67a65
gunicorn@20.1.0
22.0.0
1
marcinkujawski/flask-app:2.0.1a455017b9d0e
gunicorn@21.2.0
22.0.0
1
milesmcc/shynet:v0.13.1ba54f7797a6b
gunicorn@20.1.0
22.0.0
1
milesmcc/shynet:v0.12.0e821e31140f7
gunicorn@20.1.0
22.0.0
1
miltex/python-api:1.0.0dab12a7748d5
gunicorn@20.1.0
22.0.0
1
mondata/mlflow:v2.3.0.s3.gc6f94c6caf8bf
gunicorn@20.1.0
22.0.0
1
mozilla/syncserver:latest016162bf39d8
gunicorn@19.10.0
22.0.0
1
mshanley80/httpbin2022:latest5b189a70c0fb
gunicorn@20.1.0
22.0.0
1
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
gunicorn@19.9.0
22.0.0
1
netboxcommunity/netbox:v3.2.83d652dca5351
gunicorn@20.1.0
22.0.0
1
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
gunicorn@20.0.4
22.0.0
1
ngoduykhanh/powerdns-admin:latest9898a7cf37d2
gunicorn@20.0.4
22.0.0
1
opendatacube/restcube:latest91870111837c
gunicorn@20.0.4
22.0.0
1
opendatacube/wms:latest1b90cdf68831
gunicorn@20.0.4
22.0.0
1
openelevation/open-elevation:latest82fb21612e86
gunicorn@20.1.0
22.0.0
1
pschiffe/pdns-admin:0.4.137ebba8c2b8f
gunicorn@20.1.0
22.0.0
1
pypiserver/pypiserver:v2.4.1e935e19433ef
gunicorn@20.0.4
22.0.0
1
redash/redash:10.0.0.b503639392753c0376
gunicorn@20.0.4
22.0.0
1
seafileltd/seafile-mc:9.0.106693911bcc40
gunicorn@20.1.0
22.0.0
1
seafileltd/seafile-mc:10.0.170628f29c663
gunicorn@20.1.0
22.0.0
1
seafileltd/seafile-mc:9.0.97ac833196f60
gunicorn@20.1.0
22.0.0
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
gunicorn@20.1.0
22.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.