StackRadar

CVE-2025-57833

High

Advisory

Published 3 Sept 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.157
97th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
69
of 17,781 indexed, latest versions
Container images
71
deployed by those charts
Fix available
1 of 1
affected package

Django is subject to SQL injection through its column aliases

Carried by container images the latest versions of 69 of 17,781 indexed charts deploy, on 71 images.

Affected packageAffected versionsFixed inImages
djangopypi1.11.11, 1.11.24, 1.11.29, 2.2.13+48 more4.2.24, 5.1.1271
OSV records
GHSA-6w2r-r2m5-xq5wPYSEC-2025-105
Also known as
BIT-django-2025-57833

Charts affected

69 by stars
ChartLatestAffected imagesRadar Score
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
django@2.2.14
4.2.24

Open the chart page →

24,293
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
django@3.1.1
4.2.24

Open the chart page →

7,984
archiveboxhelmforgeVerified publisher1.1.121 of 1See more

archivebox helmforge 1.1.12

1 of the 1 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
archivebox/archivebox:0.7.41a5a37331091
django@3.1.14
4.2.24

Open the chart page →

7,633
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
django@4.2.7
4.2.24

Open the chart page →

16,384
erpnextimprowisedVerified publisher3.3.01 of 3See more

erpnext improwised 3.3.0

1 of the 3 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
improwised/erpnext-worker:v13.4.197280b55cbd4
django@1.11.29
4.2.24

Open the chart page →

6,501
healthchecksimprowisedVerified publisher1.1.11 of 2See more

healthchecks improwised 1.1.1

1 of the 2 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
linuxserver/healthchecks:2.7.2023033194696dab3c50
django@4.1.7
4.2.24

Open the chart page →

2,628
ja-shortenerja-shortenerVerified publisher0.1.01 of 2See more

ja-shortener ja-shortener 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
cr0hn/ja-shortener:v0.1.414482d0bc4a1
django@5.2.3
4.2.24

Open the chart page →

2,089
shynetjuniorjpdj0.1.301 of 1See more

shynet juniorjpdj 0.1.30

1 of the 1 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.13.1ba54f7797a6b
django@4.1.10
4.2.24

Open the chart page →

2,581
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
django@3.2.16
4.2.24

Open the chart page →

16,417
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
django@5.0.14
5.1.12

Open the chart page →

8,405
large-systems-djangolarge-systems-djangoVerified publisher1.0.01 of 1See more

large-systems-django large-systems-django 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
ha33ona/python:test6affdfc644d0
django@2.2.26
4.2.24

Open the chart page →

3,891
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
django@5.1.10
4.2.24

Open the chart page →

37,942
comacopencord1.0.02 of 9See more

comac opencord 1.0.0

2 of the 9 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
django@1.11.11
4.2.24
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
django@1.11.11
4.2.24

Open the chart page →

88,546
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
django@1.11.11
4.2.24

Open the chart page →

26,211
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
django@3.2.14
4.2.24

Open the chart page →

22,084
libretimepodzone-chartsVerified publisher0.4.11 of 9See more

libretime podzone-charts 0.4.1

1 of the 9 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
ghcr.io/libretime/libretime-api:latesteae026cc8909
django@4.2.23
4.2.24

Open the chart page →

11,149
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
django@3.0.4
4.2.24

Open the chart page →

8,694
substra-backendsubstraVerified publisher26.15.31 of 7See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-backend:1.0.121967f54ec86
django@4.2.16
4.2.24

Open the chart page →

4,731
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-57833.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
django@4.0.5
4.2.24

Open the chart page →

3,392

Container images carrying it

71 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
seafileltd/seafile-mc:10.0.170628f29c663
django@3.2.16
4.2.24
1
seafileltd/seafile-mc:9.0.97ac833196f60
django@3.2.14
4.2.24
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
django@4.2.15
4.2.24
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
django@2.2.14
4.2.24
1
sissbruecker/linkding:1.35.00c5dddf0b37c
django@5.1.1
4.2.24
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
django@5.1.10
4.2.24
1
swisscomcloud/esc-vm-scheduler-web:latestb6639d1a922e
django@3.2.16
4.2.24
1
taigaio/taiga-back:6.4.29f97323cc150
django@2.2.24
4.2.24
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
django@3.2.11
4.2.24
1
weblate/weblate:3.11.3-182848df56ecd
django@3.0.4
4.2.24
1
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
django@4.0.10
4.2.24
1
ghcr.io/libretime/libretime-api:latesteae026cc8909
django@4.2.23
4.2.24
1
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
django@5.1.4
4.2.24
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
django@5.0.4
5.1.12
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
django@5.1.1
4.2.24
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
django@4.0.6
4.2.24
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
django@4.2.7
4.2.24
1
ghcr.io/substra/substra-backend:1.0.121967f54ec86
django@4.2.16
4.2.24
1
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
django@4.2.18
4.2.24
1
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
django@5.2.3
4.2.24
1
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
django@4.2.21
4.2.24
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.