StackRadar

CVE-2025-57833

High

Advisory

Published 3 Sept 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.157
97th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
69
of 17,781 indexed, latest versions
Container images
71
deployed by those charts
Fix available
1 of 1
affected package

Django is subject to SQL injection through its column aliases

Carried by container images the latest versions of 69 of 17,781 indexed charts deploy, on 71 images.

Affected packageAffected versionsFixed inImages
djangopypi1.11.11, 1.11.24, 1.11.29, 2.2.13+48 more4.2.24, 5.1.1271
OSV records
GHSA-6w2r-r2m5-xq5wPYSEC-2025-105
Also known as
BIT-django-2025-57833

Charts affected

69 by stars
ChartLatestAffected imagesRadar Score
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
django@4.0.7
4.2.24

Open the chart page →

9,145
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
grafana/oncall:v1.16.5499851658393
django@4.2.22
4.2.24

Open the chart page →

16,251
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
django@2.2.13
4.2.24

Open the chart page →

30,326
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
django@4.2.23
4.2.24

Open the chart page →

27,267
taigarc-helm-charts0.1.01 of 7See more

taiga rc-helm-charts 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
taigaio/taiga-back:6.4.29f97323cc150
django@2.2.24
4.2.24

Open the chart page →

7,255
netboxstartechnicaVerified publisher5.1.01 of 4See more

netbox startechnica 5.1.0

1 of the 4 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
django@4.2.11
4.2.24

Open the chart page →

1,650
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
django@5.0.9
5.1.12

Open the chart page →

17,404
openshift-secured-redisInsighteximiaitVerified publisher0.9.21 of 2See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
redislabs/redisinsight:1.14.0b03ab1426d0d
django@4.1.7
4.2.24

Open the chart page →

13,874
healthchecksgabe565Verified publisher0.17.01 of 1See more

healthchecks gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
django@5.1.4
4.2.24

Open the chart page →

2,286
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
flagsmith/flagsmith-api:v2.6.0fd58556339a4
django@2.2.17
4.2.24

Open the chart page →

6,868
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
django@2.2.28
4.2.24
kobotoolbox/kpi:2.022.24dbcacc01bccd4
django@2.2.27
4.2.24

Open the chart page →

18,517
open-zaakopen-zaak0.8.01 of 3See more

open-zaak open-zaak 0.8.0

1 of the 3 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
openzaak/open-zaak:1.6.02ca2ea6e0ae9
django@3.2.12
4.2.24

Open the chart page →

4,045
psonoankra-chartsVerified publisher1.2.01 of 2See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
psono/psono-server:5.0.03b974b43ea03
django@4.2.16
4.2.24

Open the chart page →

2,388
anteonanteonVerified publisher2.6.43 of 13See more

anteon anteon 2.6.4

3 of the 13 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
django@5.0.7
5.1.12
ddosify/selfhosted_backend:3.2.93c11e3182652
django@4.1.13
4.2.24
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
django@4.1.13
4.2.24

Open the chart page →

22,202
squestchristianhuthVerified publisher6.6.71 of 4See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
django@4.2.21
4.2.24

Open the chart page →

9,971
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
django@5.1.1
4.2.24

Open the chart page →

13,761
weblatedeliveryheroVerified publisher0.3.21 of 3See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
django@3.1.1
4.2.24

Open the chart page →

7,984
archerydoubanVerified publisher0.4.31 of 6See more

archery douban 0.4.3

1 of the 6 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
hhyo/archery:v1.9.11aa41843419e
django@4.1.1
4.2.24

Open the chart page →

5,853
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
django@4.2.15
4.2.24

Open the chart page →

10,858
taigafermosit0.0.111 of 7See more

taiga fermosit 0.0.11

1 of the 7 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
django@3.2.25
4.2.24

Open the chart page →

8,496
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
django@4.0.10
4.2.24

Open the chart page →

1,965
healthchecksgeek-cookbookVerified publisher4.4.21 of 1See more

healthchecks geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
linuxserver/healthchecks:version-v1.20.050792a72fc71
django@3.2
4.2.24

Open the chart page →

1,667
paperlessgeek-cookbookVerified publisher9.2.01 of 1See more

paperless geek-cookbook 9.2.0

1 of the 1 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
django@4.0.6
4.2.24

Open the chart page →

3,924
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
django@3.2.11
4.2.24

Open the chart page →

7,801
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
django@4.2.23
4.2.24

Open the chart page →

12,397
helm-taigamvitale1989-helm-taigaVerified publisher0.2.51 of 2See more

helm-taiga mvitale1989-helm-taiga 0.2.5

1 of the 2 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
django@1.11.24
4.2.24

Open the chart page →

5,104
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
django@5.2.3
4.2.24

Open the chart page →

6,873
open-notificatiesopen-zaak0.7.01 of 4See more

open-notificaties open-zaak 0.7.0

1 of the 4 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
openzaak/open-notificaties:1.3.02e65313b9b10
django@3.2.12
4.2.24

Open the chart page →

2,850
healthchecksstackhelmVerified publisher0.1.01 of 2See more

healthchecks stackhelm 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
healthchecks/healthchecks:v2.8.1e82bb0836e30
django@4.2
4.2.24

Open the chart page →

2,236
taigaunxwaresVerified publisher2026.3.81 of 6See more

taiga unxwares 2026.3.8

1 of the 6 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
django@3.2.25
4.2.24

Open the chart page →

9,148
verbacapverbacapVerified publisher1.0.71 of 1See more

verbacap verbacap 1.0.7

1 of the 1 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
django@5.0.4
5.1.12

Open the chart page →

2,233
ddosifyanteonVerified publisher1.7.53 of 13See more

ddosify anteon 1.7.5

3 of the 13 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
django@4.2.11
4.2.24
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
django@4.1.13
4.2.24
ddosify/selfhosted_hammermanager:1.2.471b8768f49bc
django@3.2.24
4.2.24

Open the chart page →

25,669
shynetatrox0.1.11 of 1See more

shynet atrox 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.12.0e821e31140f7
django@3.2.10
4.2.24

Open the chart page →

5,507
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
django@3.2.4
4.2.24

Open the chart page →

22,891
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
django@5.0.9
5.1.12

Open the chart page →

10,145
camerahubcamerahub0.10.211 of 2See more

camerahub camerahub 0.10.21

1 of the 2 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
camerahub/camerahub:0.36.23a5af37dd6e1b
django@3.2.18
4.2.24

Open the chart page →

2,507
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
django@3.2.9
4.2.24

Open the chart page →

12,457
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
django@3.2.9
4.2.24

Open the chart page →

12,131
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
django@3.2.9
4.2.24

Open the chart page →

11,592
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
django@4.0.7
4.2.24

Open the chart page →

16,069
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
django@5.0.3
5.1.12

Open the chart page →

11,335
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
django@5.1.1
4.2.24

Open the chart page →

6,075
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
django@3.2.16
4.2.24

Open the chart page →

14,856
devops-diplomdevops-diplom-chartVerified publisher0.8.01 of 2See more

devops-diplom devops-diplom-chart 0.8.0

1 of the 2 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
alexeyr7/sf-test-app:latestdf0b41fdbd53
django@4.0.5
4.2.24

Open the chart page →

2,548
codecovdoubanVerified publisher0.2.42 of 8See more

codecov douban 0.2.4

2 of the 8 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
django@4.2.7
4.2.24
codecov/self-hosted-worker:24.4.1837f546b479b
django@4.2.11
4.2.24

Open the chart page →

24,917
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
django@3.2.14
4.2.24

Open the chart page →

25,122
escvmschedulerescvmscheduler1.0.71 of 3See more

escvmscheduler escvmscheduler 1.0.7

1 of the 3 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
swisscomcloud/esc-vm-scheduler-web:latestb6639d1a922e
django@3.2.16
4.2.24

Open the chart page →

4,678
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
django@3.2.8
4.2.24

Open the chart page →

64,489
tandoorgabe565Verified publisher0.9.91 of 2See more

tandoor gabe565 0.9.9

1 of the 2 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
django@4.2.18
4.2.24

Open the chart page →

2,183
babybuddygeek-cookbookVerified publisher1.2.21 of 1See more

babybuddy geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
linuxserver/babybuddy:1.10.2f7d7c7704249
django@4.0.2
4.2.24

Open the chart page →

1,489

Container images carrying it

71 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
seafileltd/seafile-mc:10.0.170628f29c663
django@3.2.16
4.2.24
1
seafileltd/seafile-mc:9.0.97ac833196f60
django@3.2.14
4.2.24
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
django@4.2.15
4.2.24
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
django@2.2.14
4.2.24
1
sissbruecker/linkding:1.35.00c5dddf0b37c
django@5.1.1
4.2.24
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
django@5.1.10
4.2.24
1
swisscomcloud/esc-vm-scheduler-web:latestb6639d1a922e
django@3.2.16
4.2.24
1
taigaio/taiga-back:6.4.29f97323cc150
django@2.2.24
4.2.24
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
django@3.2.11
4.2.24
1
weblate/weblate:3.11.3-182848df56ecd
django@3.0.4
4.2.24
1
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
django@4.0.10
4.2.24
1
ghcr.io/libretime/libretime-api:latesteae026cc8909
django@4.2.23
4.2.24
1
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
django@5.1.4
4.2.24
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
django@5.0.4
5.1.12
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
django@5.1.1
4.2.24
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
django@4.0.6
4.2.24
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
django@4.2.7
4.2.24
1
ghcr.io/substra/substra-backend:1.0.121967f54ec86
django@4.2.16
4.2.24
1
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
django@4.2.18
4.2.24
1
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
django@5.2.3
4.2.24
1
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
django@4.2.21
4.2.24
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.