StackRadarChart IndexLive demo

CVE-2025-59682

Low

Advisory

Published 1 Oct 2025In the index since 6 Sept 2026

Severity: Low; worst across findings
CVSS: 3.1; base score, highest
EPSS: 0.009; 58th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 20; of 17,781 indexed, latest versions
Container images: 21; deployed by those charts
Fix available: 1 of 1; affected package

Django vulnerable to partial directory traversal via archives

Carried by container images the latest versions of 20 of 17,781 indexed charts deploy, on 21 images.

Affected package	Affected versions	Fixed in	Images
djangopypi	4.2, 4.2.7, 4.2.11, 4.2.15+9 more	4.2.25, 5.1.13, 5.2.7	21

OSV records: GHSA-q95w-c7qg-hrff
Also known as: BIT-django-2025-59682, PYSEC-2026-1296

Charts affected

20 by stars

Chart

Latest

Affected images

Radar Score

oncallgrafana

1 of 12 See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2025-59682.

Container image	Digest	Package	Fixed in
grafana/oncall :v1.16.5	499851658393	django@4.2.22	4.2.25

Open the chart page →

16,251

seafiledatamate

1 of 6 See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2025-59682.

Container image	Digest	Package	Fixed in
datamate/seafile-professional :11.0.20	2dd66b722464	django@4.2.23	4.2.25

Open the chart page →

27,267

netboxstartechnica

1 of 4 See more

netbox startechnica 5.1.0

1 of the 4 container images this version deploys carry CVE-2025-59682.

Container image	Digest	Package	Fixed in
netboxcommunity/netbox :v3.7.8-2.8.0	9bf83b350a89	django@4.2.11	4.2.25

Open the chart page →

1,650

healthchecksgabe565

1 of 1 See more

healthchecks gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2025-59682.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/healthchecks :version-v3.9	b5c6bfb00b03	django@5.1.4	5.1.13

Open the chart page →

2,286

psonoankra-charts

1 of 2 See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-59682.

Container image	Digest	Package	Fixed in
psono/psono-server :5.0.0	3b974b43ea03	django@4.2.16	4.2.25

Open the chart page →

2,388

squestchristianhuth

1 of 4 See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2025-59682.

Container image	Digest	Package	Fixed in
quay.io/hewlettpackardenterprise/squest :2.8.4	65694109877e	django@4.2.21	4.2.25

Open the chart page →

9,971

paperless-ngxcrystalnet

1 of 3 See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2025-59682.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	django@5.1.1	5.1.13

Open the chart page →

13,761

seafiledr300481

1 of 1 See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2025-59682.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	django@4.2.15	4.2.25

Open the chart page →

10,858

huehue

1 of 3 See more

12,397

openvaultopenvault

1 of 2 See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2025-59682.

Container image	Digest	Package	Fixed in
ghcr.io/wgbh-mla/ov-wag :v1.1.0	6df27f944fe8	django@5.2.3	5.2.7

Open the chart page →

6,873

healthchecksstackhelm

1 of 2 See more

healthchecks stackhelm 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-59682.

Container image	Digest	Package	Fixed in
healthchecks/healthchecks :v2.8.1	e82bb0836e30	django@4.2	4.2.25

Open the chart page →

2,236

1 of 13 See more

ddosify anteon 1.7.5

1 of the 13 container images this version deploys carry CVE-2025-59682.

Container image	Digest	Package	Fixed in
ddosify/selfhosted_alaz_backend :1.0.6	a43c5155fa1c	django@4.2.11	4.2.25

Open the chart page →

25,669

linkdingdeimosfr-charts

1 of 1 See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-59682.

Container image	Digest	Package	Fixed in
sissbruecker/linkding :1.35.0	0c5dddf0b37c	django@5.1.1	5.1.13

Open the chart page →

6,075

2 of 8 See more

codecov douban 0.2.4

2 of the 8 container images this version deploys carry CVE-2025-59682.

Container image	Digest	Package	Fixed in
codecov/self-hosted-api :24.4.1	0475cb1c3136	django@4.2.7	4.2.25
codecov/self-hosted-worker :24.4.1	837f546b479b	django@4.2.11	4.2.25

Open the chart page →

24,917

tandoorgabe565

1 of 2 See more

tandoor gabe565 0.9.9

1 of the 2 container images this version deploys carry CVE-2025-59682.

Container image	Digest	Package	Fixed in
ghcr.io/tandoorrecipes/recipes :1.5.31	063eb446e298	django@4.2.18	4.2.25

Open the chart page →

2,183

paperlesshomelabcihelmchartstest

1 of 1 See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2025-59682.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	django@4.2.7	4.2.25

Open the chart page →

16,384

ja-shortenerja-shortener

1 of 2 See more

ja-shortener ja-shortener 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-59682.

Container image	Digest	Package	Fixed in
cr0hn/ja-shortener :v0.1.4	14482d0bc4a1	django@5.2.3	5.2.7

Open the chart page →

2,089

linkdinglinkding

1 of 1 See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-59682.

Container image	Digest	Package	Fixed in
sissbruecker/linkding :1.41.0-plus	a222fb777e1f	django@5.1.10	5.1.13

Open the chart page →

37,942

libretimepodzone-charts

1 of 9 See more

libretime podzone-charts 0.4.1

1 of the 9 container images this version deploys carry CVE-2025-59682.

Container image	Digest	Package	Fixed in
ghcr.io/libretime/libretime-api :latest	eae026cc8909	django@4.2.23	4.2.25

Open the chart page →

11,149

substra-backendsubstra

1 of 7 See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry CVE-2025-59682.

Container image	Digest	Package	Fixed in
ghcr.io/substra/substra-backend :1.0.1	21967f54ec86	django@4.2.16	4.2.25

Open the chart page →

4,731

Container images carrying it

21 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
codecov/self-hosted-api :24.4.1	0475cb1c3136	django@4.2.7	4.2.25	1
codecov/self-hosted-worker :24.4.1	837f546b479b	django@4.2.11	4.2.25	1
cr0hn/ja-shortener :v0.1.4	14482d0bc4a1	django@5.2.3	5.2.7	1
datamate/seafile-professional :11.0.20	2dd66b722464	django@4.2.23	4.2.25	1
ddosify/selfhosted_alaz_backend :1.0.6	a43c5155fa1c	django@4.2.11	4.2.25	1
gethue/hue :latest	7d5c1b9f8a79	django@4.2.23	4.2.25	1
grafana/oncall :v1.16.5	499851658393	django@4.2.22	4.2.25	1
healthchecks/healthchecks :v2.8.1	e82bb0836e30	django@4.2	4.2.25	1
netboxcommunity/netbox :v3.7.8-2.8.0	9bf83b350a89	django@4.2.11	4.2.25	1
psono/psono-server :5.0.0	3b974b43ea03	django@4.2.16	4.2.25	1
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	django@4.2.15	4.2.25	1
sissbruecker/linkding :1.35.0	0c5dddf0b37c	django@5.1.1	5.1.13	1
sissbruecker/linkding :1.41.0-plus	a222fb777e1f	django@5.1.10	5.1.13	1
ghcr.io/libretime/libretime-api :latest	eae026cc8909	django@4.2.23	4.2.25	1
ghcr.io/linuxserver/healthchecks :version-v3.9	b5c6bfb00b03	django@5.1.4	5.1.13	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	django@5.1.1	5.1.13	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	django@4.2.7	4.2.25	1
ghcr.io/substra/substra-backend :1.0.1	21967f54ec86	django@4.2.16	4.2.25	1
ghcr.io/tandoorrecipes/recipes :1.5.31	063eb446e298	django@4.2.18	4.2.25	1
ghcr.io/wgbh-mla/ov-wag :v1.1.0	6df27f944fe8	django@5.2.3	5.2.7	1
quay.io/hewlettpackardenterprise/squest :2.8.4	65694109877e	django@4.2.21	4.2.25	1