StackRadar

CVE-2024-6827

High

Advisory

Published 20 Mar 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
126
of 17,781 indexed, latest versions
Container images
137
deployed by those charts
Fix available
1 of 1
affected package

Gunicorn HTTP Request/Response Smuggling vulnerability

Carried by container images the latest versions of 126 of 17,781 indexed charts deploy, on 137 images.

Affected packageAffected versionsFixed inImages
gunicornpypi19.6.0, 19.7.1, 19.8.0, 19.8.1+5 more22.0.0137
OSV records
GHSA-hc5x-x2vx-497g
Also known as
PYSEC-2026-1433

Charts affected

126 by stars
ChartLatestAffected imagesRadar Score
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
gunicorn@20.1.0
22.0.0

Open the chart page →

12,457
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
gunicorn@20.1.0
22.0.0

Open the chart page →

12,131
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
gunicorn@20.1.0
22.0.0

Open the chart page →

11,592
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
gunicorn@20.1.0
22.0.0

Open the chart page →

16,069
kfservingcowboysysopVerified publisher1.3.11 of 3See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
kfserving/models-web-app:v0.6.1f322d6ffdfa3
gunicorn@20.1.0
22.0.0

Open the chart page →

3,830
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
gunicorn@20.0.4
22.0.0

Open the chart page →

27,728
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
gunicorn@20.0.4
22.0.0

Open the chart page →

18,863
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
gunicorn@20.0.4
22.0.0

Open the chart page →

24,335
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
gunicorn@20.0.4
22.0.0

Open the chart page →

4,422
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
gunicorn@20.1.0
22.0.0

Open the chart page →

14,856
design-cataloguedesign-catalogue0.1.01 of 2See more

design-catalogue design-catalogue 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
gunicorn@20.0.4
22.0.0

Open the chart page →

2,770
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
gunicorn@20.1.0
22.0.0

Open the chart page →

24,917
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
gunicorn@20.1.0
22.0.0

Open the chart page →

4,550
amundsenduyet1.1.03 of 7See more

amundsen duyet 1.1.0

3 of the 7 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
gunicorn@20.0.4
22.0.0
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
gunicorn@20.0.4
22.0.0
amundsendev/amundsen-search:2.4.099dda9502c3e
gunicorn@20.0.4
22.0.0

Open the chart page →

11,174
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
gunicorn@20.1.0
22.0.0

Open the chart page →

25,122
escvmschedulerescvmscheduler1.0.71 of 3See more

escvmscheduler escvmscheduler 1.0.7

1 of the 3 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
swisscomcloud/esc-vm-scheduler-web:latestb6639d1a922e
gunicorn@20.1.0
22.0.0

Open the chart page →

4,678
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
gunicorn@20.1.0
22.0.0

Open the chart page →

4,085
infrafibonacci-cluster-infraVerified publisher1.0.01 of 4See more

infra fibonacci-cluster-infra 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
dpage/pgadmin4:8.418cd5711fc9a
gunicorn@20.1.0
22.0.0

Open the chart page →

12,454
bae-activation-servicefiware0.1.21 of 1See more

bae-activation-service fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
fiware/bae-activation-service:v0.0.33e3ec88d59ed
gunicorn@20.0.4
22.0.0

Open the chart page →

3,186
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
gunicorn@20.1.0
22.0.0

Open the chart page →

64,489
ishare-satellitefiware1.3.21 of 1See more

ishare-satellite fiware 1.3.2

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
fiware/ishare-satellite:1.2.0c3c1c8ccfb45
gunicorn@20.1.0
22.0.0

Open the chart page →

1,778
forms-catalogueforms-catalogue0.1.01 of 2See more

forms-catalogue forms-catalogue 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
gunicorn@20.1.0
22.0.0

Open the chart page →

2,188
powerdnsfsdrw080.1.31 of 4See more

powerdns fsdrw08 0.1.3

1 of the 4 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:latest9898a7cf37d2
gunicorn@20.0.4
22.0.0

Open the chart page →

1,958
spectergaloymoney0.3.11 of 1See more

specter galoymoney 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
lncm/specter-desktop:v1.10.536eaa06f99f4
gunicorn@20.1.0
22.0.0

Open the chart page →

1,691
spectergaloymoney20.3.11 of 1See more

specter galoymoney2 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
lncm/specter-desktop:v1.10.536eaa06f99f4
gunicorn@20.1.0
22.0.0

Open the chart page →

1,691
babybuddygeek-cookbookVerified publisher1.2.21 of 1See more

babybuddy geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
linuxserver/babybuddy:1.10.2f7d7c7704249
gunicorn@20.1.0
22.0.0

Open the chart page →

1,489
ihatemoneygeek-cookbookVerified publisher1.1.21 of 1See more

ihatemoney geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
ihatemoney/ihatemoney:5.2.0457fda1feb32
gunicorn@20.1.0
22.0.0

Open the chart page →

1,526
powerdns-admingeek-cookbookVerified publisher1.2.21 of 1See more

powerdns-admin geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
gunicorn@20.0.4
22.0.0

Open the chart page →

2,643
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
gunicorn@20.1.0
22.0.0

Open the chart page →

24,293
gmaas-github-apigmaas-github-api2.0.11 of 1See more

gmaas-github-api gmaas-github-api 2.0.1

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
gmaas2/github-api:latest148fc2d9afe9
gunicorn@20.1.0
22.0.0

Open the chart page →

1,205
resurrectbothalkeye0.1.51 of 1See more

resurrectbot halkeye 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
halkeye/slack-resurrect:v0.1.477b05e95fdb5
gunicorn@19.9.0
22.0.0

Open the chart page →

3,809
ms-hello-pythonhello-python-helm0.1.11 of 1See more

ms-hello-python hello-python-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
irakli/ms-hello-python:latest9e7a91ba9ae0
gunicorn@20.0.4
22.0.0

Open the chart page →

891
mlflowhelm-charts-nr1.0.101 of 1See more

mlflow helm-charts-nr 1.0.10

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
gunicorn@20.0.4
22.0.0

Open the chart page →

4,422
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
gunicorn@21.2.0
22.0.0

Open the chart page →

16,384
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
gunicorn@20.1.0
22.0.0

Open the chart page →

8,685
activation-servicei4trustVerified publisher2.3.11 of 1See more

activation-service i4trust 2.3.1

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
i4trust/activation-service:2.2.09f3719176893
gunicorn@20.1.0
22.0.0

Open the chart page →

2,058
erpnextimprowisedVerified publisher3.3.01 of 3See more

erpnext improwised 3.3.0

1 of the 3 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
improwised/erpnext-worker:v13.4.197280b55cbd4
gunicorn@20.1.0
22.0.0

Open the chart page →

6,501
ingress-dashboardingress-dashboard0.1.11 of 3See more

ingress-dashboard ingress-dashboard 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
taemon1337/image-api:0.0.1247bc1dc4f07
gunicorn@20.1.0
22.0.0

Open the chart page →

4,542
redashinseefrlab2.1.01 of 3See more

redash inseefrlab 2.1.0

1 of the 3 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
redash/redash:10.0.0.b503639392753c0376
gunicorn@20.0.4
22.0.0

Open the chart page →

3,314
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization-streaming:3.01a89327e499b
gunicorn@20.1.0
22.0.0

Open the chart page →

11,069
guestbookjakuboskera0.2.01 of 3See more

guestbook jakuboskera 0.2.0

1 of the 3 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
jakuboskera/guestbook:v0.3.04989afa06e74
gunicorn@20.1.0
22.0.0

Open the chart page →

1,090
todojakuboskera0.1.11 of 1See more

todo jakuboskera 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
jakuboskera/todo:v0.2.3714b1adbbc2d
gunicorn@20.1.0
22.0.0

Open the chart page →

801
http-reqtracejulb-meVerified publisher1.0.41 of 1See more

http-reqtrace julb-me 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
julb/http-reqtrace:1.1.00806409af397
gunicorn@20.0.4
22.0.0

Open the chart page →

1,854
shynetjuniorjpdj0.1.301 of 1See more

shynet juniorjpdj 0.1.30

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.13.1ba54f7797a6b
gunicorn@20.1.0
22.0.0

Open the chart page →

2,581
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
gunicorn@19.9.0
22.0.0

Open the chart page →

16,417
mlflowkelvins0.4.01 of 3See more

mlflow kelvins 0.4.0

1 of the 3 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
kelvinsp/mlflow:1.26.1cd33e6db2a59
gunicorn@20.1.0
22.0.0

Open the chart page →

4,156
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
gunicorn@19.9.0
22.0.0

Open the chart page →

14,813
large-systems-djangolarge-systems-djangoVerified publisher1.0.01 of 1See more

large-systems-django large-systems-django 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
ha33ona/python:test6affdfc644d0
gunicorn@19.9.0
22.0.0

Open the chart page →

3,891
exposureloglsst-sqre0.2.11 of 1See more

exposurelog lsst-sqre 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
lsstsqre/exposurelog:0.8.079b00fb67a65
gunicorn@20.1.0
22.0.0

Open the chart page →

2,078
python-api-postgresmiltex0.0.11 of 2See more

python-api-postgres miltex 0.0.1

1 of the 2 container images this version deploys carry CVE-2024-6827.

Container imageDigestPackageFixed in
miltex/python-api:1.0.0dab12a7748d5
gunicorn@20.1.0
22.0.0

Open the chart page →

2,347

Container images carrying it

137 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
gunicorn@20.1.0
22.0.0
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
gunicorn@20.1.0
22.0.0
1
signalen/classification:ad60447d1733473e30ab0a3ba53d58141cc1d2509496ae672877
gunicorn@20.0.4
22.0.0
1
stackstorm/st2actionrunner:3.888235ba70cad
gunicorn@21.2.0
22.0.0
1
stackstorm/st2api:3.86f56d239d280
gunicorn@21.2.0
22.0.0
1
stackstorm/st2auth:3.833ecfda16608
gunicorn@21.2.0
22.0.0
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
gunicorn@21.2.0
22.0.0
1
stackstorm/st2notifier:3.8f190a6212195
gunicorn@21.2.0
22.0.0
1
stackstorm/st2rulesengine:3.8259503496ff9
gunicorn@21.2.0
22.0.0
1
stackstorm/st2scheduler:3.8b1de2055c362
gunicorn@21.2.0
22.0.0
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
gunicorn@21.2.0
22.0.0
1
stackstorm/st2stream:3.81c8904a3bf67
gunicorn@21.2.0
22.0.0
1
stackstorm/st2timersengine:3.81bf35bfaf00c
gunicorn@21.2.0
22.0.0
1
stackstorm/st2workflowengine:3.819fdfffdbba8
gunicorn@21.2.0
22.0.0
1
swisscomcloud/esc-vm-scheduler-web:latestb6639d1a922e
gunicorn@20.1.0
22.0.0
1
tachyongroup/mlflow-deployment-controller:mlflow-controller-0.1.87e79b9000856
gunicorn@20.1.0
22.0.0
1
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
gunicorn@20.1.0
22.0.0
1
taemon1337/image-api:0.0.1247bc1dc4f07
gunicorn@20.1.0
22.0.0
1
taigaio/taiga-back:6.4.29f97323cc150
gunicorn@19.9.0
22.0.0
1
taigaio/taiga-protected:6.4.036318831b3e7
gunicorn@19.9.0
22.0.0
1
thecloudspark/app-vote:1.0c7da7417a86a
gunicorn@20.1.0
22.0.0
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
gunicorn@20.1.0
22.0.0
1
yuzutech/kroki-blockdiag:0.16.07c1917c66d96
gunicorn@20.1.0
22.0.0
1
zohardocker12/weather_app_flask:latestb86d60dbb68d
gunicorn@20.1.0
22.0.0
1
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
gunicorn@21.2.0
22.0.0
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
gunicorn@20.1.0
22.0.0
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
gunicorn@21.2.0
22.0.0
1
ghcr.io/mlops-for-all/mlflow-tracking-server:3.8-1.30.1-v1.0.0d30e631684c3
gunicorn@20.1.0
22.0.0
1
ghcr.io/mshade/kronic:v0.1.466e3043851cd
gunicorn@21.2.0
22.0.0
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
gunicorn@20.1.0
22.0.0
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
gunicorn@20.1.0
22.0.0
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
gunicorn@21.2.0
22.0.0
1
quay.io/maxiv/storageclass-router:0.4.160725dab588c
gunicorn@21.2.0
22.0.0
1
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
gunicorn@20.0.4
22.0.0
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
gunicorn@20.1.0
22.0.0
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
gunicorn@20.1.0
22.0.0
1
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
gunicorn@20.1.0
22.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.