StackRadar

CVE-2026-114137

High

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
High
worst across findings
CVSS
7.4
base score, highest
EPSS
0.004
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
99
of 18,232 indexed, latest versions
Container images
95
deployed by those charts
Fix available
1 of 1
affected package

Django REST framework: TokenProxy.delete() reports success and revokes nothing

Carried by container images the latest versions of 99 of 18,232 indexed charts deploy, on 95 images.

Affected packageAffected versionsFixed inImages
djangorestframeworkpypi3.12.1, 3.12.2, 3.12.4, 3.13.1+10 more3.18.295
OSV records
GHSA-xw6w-gcfp-cf8m

Charts affected

99 by stars
ChartLatestAffected imagesRadar Score
paperless-ngxcharts-derwitt-devVerified publisher2.1.101 of 1See more

paperless-ngx charts-derwitt-dev 2.1.10

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.49bc6e8248891
djangorestframework@3.18.1
3.18.2

Open the chart page →

5,588
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
djangorestframework@3.12.4
3.18.2

Open the chart page →

13,416
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
djangorestframework@3.12.4
3.18.2

Open the chart page →

12,925
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
djangorestframework@3.12.4
3.18.2

Open the chart page →

12,552
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
djangorestframework@3.13.1
3.18.2

Open the chart page →

20,886
authentikcluster-deploy0.3.01 of 1See more

authentik cluster-deploy 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.8.3ab9b4e8cc4ab
djangorestframework@3.17.1
3.18.2

Open the chart page →

1,668
csghubcsghubVerified publisher2.6.11 of 35See more

csghub csghub 2.6.1

1 of the 35 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
opencsghq/label-studio:v2.6.01f6764097129
djangorestframework@3.15.2
3.18.2

Open the chart page →

71,615
csgshipcsghubVerified publisher0.4.71 of 10See more

csgship csghub 0.4.7

1 of the 10 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
djangorestframework@3.15.1
3.18.2

Open the chart page →

15,550
dataflowcsghubVerified publisher2.6.01 of 8See more

dataflow csghub 2.6.0

1 of the 8 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
opencsghq/label-studio:v2.6.01f6764097129
djangorestframework@3.15.2
3.18.2

Open the chart page →

11,070
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
djangorestframework@3.15.2
3.18.2

Open the chart page →

72,197
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
djangorestframework@3.14.0
3.18.2

Open the chart page →

76,682
adventurelogdjjudas21Verified publisher0.1.21 of 3See more

adventurelog djjudas21 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
djangorestframework@3.15.2
3.18.2

Open the chart page →

11,016
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
djangorestframework@3.14.0
3.18.2

Open the chart page →

28,581
tandoorgabe565Verified publisher0.9.91 of 2See more

tandoor gabe565 0.9.9

1 of the 2 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
djangorestframework@3.15.2
3.18.2

Open the chart page →

2,952
babybuddygeek-cookbookVerified publisher1.2.21 of 1See more

babybuddy geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
linuxserver/babybuddy:1.10.2f7d7c7704249
djangorestframework@3.13.1
3.18.2

Open the chart page →

1,934
chiefonboardinghelmforgeVerified publisher1.1.171 of 3See more

chiefonboarding helmforge 1.1.17

1 of the 3 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
djangorestframework@3.18.1
3.18.2

Open the chart page →

9,393
netboxhelmforgeVerified publisher2.0.51 of 4See more

netbox helmforge 2.0.5

1 of the 4 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
djangorestframework@3.17.1
3.18.2

Open the chart page →

5,685
paperless-ngxhelmforgeVerified publisher1.1.11 of 4See more

paperless-ngx helmforge 1.1.1

1 of the 4 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
djangorestframework@3.18.1
3.18.2

Open the chart page →

8,878
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
djangorestframework@3.14.0
3.18.2

Open the chart page →

19,601
paperlesshpVerified publisher0.1.21 of 5See more

paperless hp 0.1.2

1 of the 5 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
djangorestframework@3.17.2
3.18.2

Open the chart page →

42,418
label-studioinseefrlab2.3.11 of 3See more

label-studio inseefrlab 2.3.1

1 of the 3 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
heartexlabs/label-studio:latestafcc516a2277
djangorestframework@3.17.2
3.18.2

Open the chart page →

881
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
djangorestframework@3.15.2
3.18.2

Open the chart page →

98,094
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
djangorestframework@3.16.1
3.18.2

Open the chart page →

12,297
authentikkagiso-me0.1.11 of 1See more

authentik kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
djangorestframework@3.16.1
3.18.2

Open the chart page →

5,925
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
djangorestframework@3.12.2
3.18.2

Open the chart page →

82,822
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
djangorestframework@3.15.2
3.18.2

Open the chart page →

103,357
oncall-hobbylovemew67Verified publisher0.0.51 of 2See more

oncall-hobby lovemew67 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
grafana/oncall:v1.13.11159b6b836fed
djangorestframework@3.15.2
3.18.2

Open the chart page →

7,346
redisinsightlovemew67Verified publisher0.0.11 of 1See more

redisinsight lovemew67 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
redislabs/redisinsight:1.14.0b03ab1426d0d
djangorestframework@3.13.1
3.18.2

Open the chart page →

2,155
servicesmicroslacVerified publisher0.4.04 of 8See more

services microslac 0.4.0

4 of the 8 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
microslac/auth:latest5c1eb1f5c64d
djangorestframework@3.14.0
3.18.2
microslac/conversations:latest1b24afcd71ff
djangorestframework@3.14.0
3.18.2
microslac/teams:latest0f75997fcbe5
djangorestframework@3.14.0
3.18.2
microslac/users:latest216ea6832a56
djangorestframework@3.14.0
3.18.2

Open the chart page →

361,160
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
djangorestframework@3.16.1
3.18.2

Open the chart page →

15,245
babybuddynicholaswildeVerified publisher2.3.01 of 1See more

babybuddy nicholaswilde 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/babybuddy:version-v1.9.0841d90cf8e72
djangorestframework@3.12.4
3.18.2

Open the chart page →

2,318
paperless-ngxoli-the-devVerified publisher1.3.21 of 1See more

paperless-ngx oli-the-dev 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
djangorestframework@3.18.1
3.18.2

Open the chart page →

6,319
linkdingpascaliskeVerified publisher3.0.01 of 1See more

linkding pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
djangorestframework@3.16.1
3.18.2

Open the chart page →

4,537
libretimepodzone-chartsVerified publisher0.4.11 of 9See more

libretime podzone-charts 0.4.1

1 of the 9 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/libretime/libretime-api:latesteae026cc8909
djangorestframework@3.15.2
3.18.2

Open the chart page →

13,250
agentpolyaxon2.18.01 of 4See more

agent polyaxon 2.18.0

1 of the 4 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
polyaxon/polyaxon-streams:2.18.0a382a21aaf88
djangorestframework@3.16.1
3.18.2

Open the chart page →

10,940
polyaxonpolyaxon2.18.01 of 5See more

polyaxon polyaxon 2.18.0

1 of the 5 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
polyaxon/polyaxon-api:2.18.0b795f2b224d2
djangorestframework@3.16.1
3.18.2

Open the chart page →

14,992
label-studioquench-label-studioVerified publisher0.0.151 of 2See more

label-studio quench-label-studio 0.0.15

1 of the 2 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/label-studiodigest-pinnedef7f067de4cd
djangorestframework@3.17.2
3.18.2

Open the chart page →

167
ml-stackquench-ml-stackVerified publisher0.0.261 of 5See more

ml-stack quench-ml-stack 0.0.26

1 of the 5 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/label-studiodigest-pinnedef7f067de4cd
djangorestframework@3.17.2
3.18.2

Open the chart page →

317
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
djangorestframework@3.16.1
3.18.2

Open the chart page →

13,887
tandoorrtomik-helm-chartsVerified publisher0.0.11 of 1See more

tandoor rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
vabene1111/recipes:2.3.50f8d061895e9
djangorestframework@3.16.1
3.18.2

Open the chart page →

5,776
linkdingrubxkubeVerified publisher1.2.41 of 1See more

linkding rubxkube 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.47.0e35cb50e0581
djangorestframework@3.17.2
3.18.2

Open the chart page →

2,703
safe-config-servicesafe-global0.1.01 of 3See more

safe-config-service safe-global 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
djangorestframework@3.17.1
3.18.2

Open the chart page →

2,701
safe-stacksafe-global0.1.02 of 9See more

safe-stack safe-global 0.1.0

2 of the 9 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
djangorestframework@3.17.1
3.18.2
safeglobal/safe-transaction-service:latest7b576c73f865
djangorestframework@3.18.1
3.18.2

Open the chart page →

106,910
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
safeglobal/safe-transaction-service:latest7b576c73f865
djangorestframework@3.18.1
3.18.2

Open the chart page →

102,808
seafileschmitzis13.0.131 of 4See more

seafile schmitzis 13.0.13

1 of the 4 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
schmitzis/monorepo:seafile-13.0-latestc583f1be2af2
djangorestframework@3.16.1
3.18.2

Open the chart page →

45,498
seafileseafileVerified publisher0.12.11 of 1See more

seafile seafile 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
djangorestframework@3.14.0
3.18.2

Open the chart page →

76,611
backendsignalen4.25.01 of 4See more

backend signalen 4.25.0

1 of the 4 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
signalen/backend:2.50.1826bb090bc4e4
djangorestframework@3.15.2
3.18.2

Open the chart page →

38,204
substra-backendsubstraVerified publisher26.15.31 of 7See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-backend:1.0.121967f54ec86
djangorestframework@3.15.2
3.18.2

Open the chart page →

5,423
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
djangorestframework@3.13.1
3.18.2

Open the chart page →

4,726

Container images carrying it

95 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
openzaak/open-notificaties:1.3.02e65313b9b10
djangorestframework@3.12.4
3.18.2
1
openzaak/open-zaak:1.6.02ca2ea6e0ae9
djangorestframework@3.12.4
3.18.2
1
polyaxon/polyaxon-api:2.18.0b795f2b224d2
djangorestframework@3.16.1
3.18.2
1
polyaxon/polyaxon-streams:2.18.0a382a21aaf88
djangorestframework@3.16.1
3.18.2
1
pretix/standalone:2026.8.0ec17c2f761f7
djangorestframework@3.17.2
3.18.2
1
prowlercloud/prowler-api:5.31.14f252d579be2
djangorestframework@3.15.2
3.18.2
1
psono/psono-server:5.0.03b974b43ea03
djangorestframework@3.15.2
3.18.2
1
recordsansible/ara-api:latest9dfd6e18f474
djangorestframework@3.17.1
3.18.2
1
schmitzis/monorepo:seafile-13.0-latestc583f1be2af2
djangorestframework@3.16.1
3.18.2
1
seafileltd/seafile-mc:10.0.170628f29c663
djangorestframework@3.14.0
3.18.2
1
signalen/backend:2.50.1826bb090bc4e4
djangorestframework@3.15.2
3.18.2
1
sissbruecker/linkding:1.35.00c5dddf0b37c
djangorestframework@3.15.2
3.18.2
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
djangorestframework@3.15.2
3.18.2
1
sissbruecker/linkding:1.47.0e35cb50e0581
djangorestframework@3.17.2
3.18.2
1
vabene1111/recipes:2.3.50f8d061895e9
djangorestframework@3.16.1
3.18.2
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
djangorestframework@3.13.1
3.18.2
1
wger/server:2.71c5789b93bfe
djangorestframework@3.17.2
3.18.2
1
ghcr.io/argonix-io/argonix-api:0.6.5431abcce7c1e
djangorestframework@3.17.1
3.18.2
1
ghcr.io/cfi2017/opencve-web:3.0.06961eab190a2
djangorestframework@3.15.2
3.18.2
1
ghcr.io/gabe565/obico/web:latest6acb4a5903eb
djangorestframework@3.15.1
3.18.2
1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
djangorestframework@3.16.1
3.18.2
1
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
djangorestframework@3.16.1
3.18.2
1
ghcr.io/goauthentik/server:2026.8.5602227a86455
djangorestframework@3.17.1
3.18.2
1
ghcr.io/goauthentik/server:2026.8.3ab9b4e8cc4ab
djangorestframework@3.17.1
3.18.2
1
ghcr.io/libretime/libretime-api:latesteae026cc8909
djangorestframework@3.15.2
3.18.2
1
ghcr.io/linuxserver/babybuddy:version-v1.9.0841d90cf8e72
djangorestframework@3.12.4
3.18.2
1
ghcr.io/linuxserver/papermerge:version-v2.0.198ba2dd3f0bd
djangorestframework@3.13.1
3.18.2
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
djangorestframework@3.15.1
3.18.2
1
ghcr.io/netbox-community/netbox:v4.7.31d6e0b5fbd48
djangorestframework@3.18.0
3.18.2
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
djangorestframework@3.15.2
3.18.2
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
djangorestframework@3.16.1
3.18.2
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
djangorestframework@3.16.1
3.18.2
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
djangorestframework@3.16.1
3.18.2
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
djangorestframework@3.13.1
3.18.2
1
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
djangorestframework@3.14.0
3.18.2
1
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
djangorestframework@3.17.2
3.18.2
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
djangorestframework@3.14.0
3.18.2
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
djangorestframework@3.16.1
3.18.2
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
djangorestframework@3.15.2
3.18.2
1
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
djangorestframework@3.16.1
3.18.2
1
ghcr.io/substra/substra-backend:1.0.121967f54ec86
djangorestframework@3.15.2
3.18.2
1
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
djangorestframework@3.15.2
3.18.2
1
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
djangorestframework@3.16.0
3.18.2
1
ghcr.io/zazukoians/qlever-ui:v0.10.3c27e20f7a2ca
djangorestframework@3.17.1
3.18.2
1
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
djangorestframework@3.16.0
3.18.2
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.