StackRadar

CVE-2026-114137

High

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
High
worst across findings
CVSS
7.4
base score, highest
EPSS
0.004
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
99
of 18,232 indexed, latest versions
Container images
95
deployed by those charts
Fix available
1 of 1
affected package

Django REST framework: TokenProxy.delete() reports success and revokes nothing

Carried by container images the latest versions of 99 of 18,232 indexed charts deploy, on 95 images.

Affected packageAffected versionsFixed inImages
djangorestframeworkpypi3.12.1, 3.12.2, 3.12.4, 3.13.1+10 more3.18.295
OSV records
GHSA-xw6w-gcfp-cf8m

Charts affected

99 by stars
ChartLatestAffected imagesRadar Score
paperless-ngxcharts-derwitt-devVerified publisher2.1.101 of 1See more

paperless-ngx charts-derwitt-dev 2.1.10

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.49bc6e8248891
djangorestframework@3.18.1
3.18.2

Open the chart page →

5,588
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
djangorestframework@3.12.4
3.18.2

Open the chart page →

13,416
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
djangorestframework@3.12.4
3.18.2

Open the chart page →

12,925
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
djangorestframework@3.12.4
3.18.2

Open the chart page →

12,552
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
djangorestframework@3.13.1
3.18.2

Open the chart page →

20,886
authentikcluster-deploy0.3.01 of 1See more

authentik cluster-deploy 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.8.3ab9b4e8cc4ab
djangorestframework@3.17.1
3.18.2

Open the chart page →

1,668
csghubcsghubVerified publisher2.6.11 of 35See more

csghub csghub 2.6.1

1 of the 35 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
opencsghq/label-studio:v2.6.01f6764097129
djangorestframework@3.15.2
3.18.2

Open the chart page →

71,615
csgshipcsghubVerified publisher0.4.71 of 10See more

csgship csghub 0.4.7

1 of the 10 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
djangorestframework@3.15.1
3.18.2

Open the chart page →

15,550
dataflowcsghubVerified publisher2.6.01 of 8See more

dataflow csghub 2.6.0

1 of the 8 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
opencsghq/label-studio:v2.6.01f6764097129
djangorestframework@3.15.2
3.18.2

Open the chart page →

11,070
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
djangorestframework@3.15.2
3.18.2

Open the chart page →

72,197
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
djangorestframework@3.14.0
3.18.2

Open the chart page →

76,682
adventurelogdjjudas21Verified publisher0.1.21 of 3See more

adventurelog djjudas21 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
djangorestframework@3.15.2
3.18.2

Open the chart page →

11,016
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
djangorestframework@3.14.0
3.18.2

Open the chart page →

28,581
tandoorgabe565Verified publisher0.9.91 of 2See more

tandoor gabe565 0.9.9

1 of the 2 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
djangorestframework@3.15.2
3.18.2

Open the chart page →

2,952
babybuddygeek-cookbookVerified publisher1.2.21 of 1See more

babybuddy geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
linuxserver/babybuddy:1.10.2f7d7c7704249
djangorestframework@3.13.1
3.18.2

Open the chart page →

1,934
chiefonboardinghelmforgeVerified publisher1.1.171 of 3See more

chiefonboarding helmforge 1.1.17

1 of the 3 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
djangorestframework@3.18.1
3.18.2

Open the chart page →

9,393
netboxhelmforgeVerified publisher2.0.51 of 4See more

netbox helmforge 2.0.5

1 of the 4 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
djangorestframework@3.17.1
3.18.2

Open the chart page →

5,685
paperless-ngxhelmforgeVerified publisher1.1.11 of 4See more

paperless-ngx helmforge 1.1.1

1 of the 4 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
djangorestframework@3.18.1
3.18.2

Open the chart page →

8,878
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
djangorestframework@3.14.0
3.18.2

Open the chart page →

19,601
paperlesshpVerified publisher0.1.21 of 5See more

paperless hp 0.1.2

1 of the 5 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
djangorestframework@3.17.2
3.18.2

Open the chart page →

42,418
label-studioinseefrlab2.3.11 of 3See more

label-studio inseefrlab 2.3.1

1 of the 3 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
heartexlabs/label-studio:latestafcc516a2277
djangorestframework@3.17.2
3.18.2

Open the chart page →

881
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
djangorestframework@3.15.2
3.18.2

Open the chart page →

98,094
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
djangorestframework@3.16.1
3.18.2

Open the chart page →

12,297
authentikkagiso-me0.1.11 of 1See more

authentik kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
djangorestframework@3.16.1
3.18.2

Open the chart page →

5,925
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
djangorestframework@3.12.2
3.18.2

Open the chart page →

82,822
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
djangorestframework@3.15.2
3.18.2

Open the chart page →

103,357
oncall-hobbylovemew67Verified publisher0.0.51 of 2See more

oncall-hobby lovemew67 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
grafana/oncall:v1.13.11159b6b836fed
djangorestframework@3.15.2
3.18.2

Open the chart page →

7,346
redisinsightlovemew67Verified publisher0.0.11 of 1See more

redisinsight lovemew67 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
redislabs/redisinsight:1.14.0b03ab1426d0d
djangorestframework@3.13.1
3.18.2

Open the chart page →

2,155
servicesmicroslacVerified publisher0.4.04 of 8See more

services microslac 0.4.0

4 of the 8 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
microslac/auth:latest5c1eb1f5c64d
djangorestframework@3.14.0
3.18.2
microslac/conversations:latest1b24afcd71ff
djangorestframework@3.14.0
3.18.2
microslac/teams:latest0f75997fcbe5
djangorestframework@3.14.0
3.18.2
microslac/users:latest216ea6832a56
djangorestframework@3.14.0
3.18.2

Open the chart page →

361,160
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
djangorestframework@3.16.1
3.18.2

Open the chart page →

15,245
babybuddynicholaswildeVerified publisher2.3.01 of 1See more

babybuddy nicholaswilde 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/babybuddy:version-v1.9.0841d90cf8e72
djangorestframework@3.12.4
3.18.2

Open the chart page →

2,318
paperless-ngxoli-the-devVerified publisher1.3.21 of 1See more

paperless-ngx oli-the-dev 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
djangorestframework@3.18.1
3.18.2

Open the chart page →

6,319
linkdingpascaliskeVerified publisher3.0.01 of 1See more

linkding pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
djangorestframework@3.16.1
3.18.2

Open the chart page →

4,537
libretimepodzone-chartsVerified publisher0.4.11 of 9See more

libretime podzone-charts 0.4.1

1 of the 9 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/libretime/libretime-api:latesteae026cc8909
djangorestframework@3.15.2
3.18.2

Open the chart page →

13,250
agentpolyaxon2.18.01 of 4See more

agent polyaxon 2.18.0

1 of the 4 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
polyaxon/polyaxon-streams:2.18.0a382a21aaf88
djangorestframework@3.16.1
3.18.2

Open the chart page →

10,940
polyaxonpolyaxon2.18.01 of 5See more

polyaxon polyaxon 2.18.0

1 of the 5 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
polyaxon/polyaxon-api:2.18.0b795f2b224d2
djangorestframework@3.16.1
3.18.2

Open the chart page →

14,992
label-studioquench-label-studioVerified publisher0.0.151 of 2See more

label-studio quench-label-studio 0.0.15

1 of the 2 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/label-studiodigest-pinnedef7f067de4cd
djangorestframework@3.17.2
3.18.2

Open the chart page →

167
ml-stackquench-ml-stackVerified publisher0.0.261 of 5See more

ml-stack quench-ml-stack 0.0.26

1 of the 5 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/label-studiodigest-pinnedef7f067de4cd
djangorestframework@3.17.2
3.18.2

Open the chart page →

317
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
djangorestframework@3.16.1
3.18.2

Open the chart page →

13,887
tandoorrtomik-helm-chartsVerified publisher0.0.11 of 1See more

tandoor rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
vabene1111/recipes:2.3.50f8d061895e9
djangorestframework@3.16.1
3.18.2

Open the chart page →

5,776
linkdingrubxkubeVerified publisher1.2.41 of 1See more

linkding rubxkube 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.47.0e35cb50e0581
djangorestframework@3.17.2
3.18.2

Open the chart page →

2,703
safe-config-servicesafe-global0.1.01 of 3See more

safe-config-service safe-global 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
djangorestframework@3.17.1
3.18.2

Open the chart page →

2,701
safe-stacksafe-global0.1.02 of 9See more

safe-stack safe-global 0.1.0

2 of the 9 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
djangorestframework@3.17.1
3.18.2
safeglobal/safe-transaction-service:latest7b576c73f865
djangorestframework@3.18.1
3.18.2

Open the chart page →

106,910
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
safeglobal/safe-transaction-service:latest7b576c73f865
djangorestframework@3.18.1
3.18.2

Open the chart page →

102,808
seafileschmitzis13.0.131 of 4See more

seafile schmitzis 13.0.13

1 of the 4 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
schmitzis/monorepo:seafile-13.0-latestc583f1be2af2
djangorestframework@3.16.1
3.18.2

Open the chart page →

45,498
seafileseafileVerified publisher0.12.11 of 1See more

seafile seafile 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
djangorestframework@3.14.0
3.18.2

Open the chart page →

76,611
backendsignalen4.25.01 of 4See more

backend signalen 4.25.0

1 of the 4 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
signalen/backend:2.50.1826bb090bc4e4
djangorestframework@3.15.2
3.18.2

Open the chart page →

38,204
substra-backendsubstraVerified publisher26.15.31 of 7See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-backend:1.0.121967f54ec86
djangorestframework@3.15.2
3.18.2

Open the chart page →

5,423
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-114137.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
djangorestframework@3.13.1
3.18.2

Open the chart page →

4,726

Container images carrying it

95 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
cloudve/cloudlaunch-server:latest4a3d7fae90bb
djangorestframework@3.12.4
3.18.2
3
ghcr.io/paperless-ngx/paperless-ngx:3.3.49bc6e8248891
djangorestframework@3.18.1
3.18.2
3
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
djangorestframework@3.18.1
3.18.2
3
opencsghq/label-studio:v2.6.01f6764097129
djangorestframework@3.15.2
3.18.2
2
redislabs/redisinsight:1.14.0b03ab1426d0d
djangorestframework@3.13.1
3.18.2
2
safeglobal/safe-config-service:latest09a5e495c219
djangorestframework@3.17.1
3.18.2
2
safeglobal/safe-transaction-service:latest7b576c73f865
djangorestframework@3.18.1
3.18.2
2
seafileltd/seafile-mc:11.0.12d0c66e4621bd
djangorestframework@3.14.0
3.18.2
2
ghcr.io/paperless-ngx/paperless-ngx:3.3.3dba0242c1df1
djangorestframework@3.18.1
3.18.2
2
ghcr.io/quenchworks/images/label-studioef7f067de4cd
djangorestframework@3.17.2
3.18.2
2
baserow/backend:2.4.1497347d0ba74
djangorestframework@3.17.2
3.18.2
1
baserow/backend:1.31.1e0b3c8130b91
djangorestframework@3.15.1
3.18.2
1
baserow/baserow:1.30.1df0c42eb67e8
djangorestframework@3.15.1
3.18.2
1
bbilly1/tubearchivist:v0.5.9b827a713f55b
djangorestframework@3.16.1
3.18.2
1
blackducksoftware/bdba-frontend:2026.9.29d7730e506c0
djangorestframework@3.18.0
3.18.2
1
camerahub/camerahub:0.36.23a5af37dd6e1b
djangorestframework@3.14.0
3.18.2
1
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
djangorestframework@3.18.1
3.18.2
1
codecov/self-hosted-api:24.4.10475cb1c3136
djangorestframework@3.14.0
3.18.2
1
datamate/seafile-professional:11.0.202dd66b722464
djangorestframework@3.14.0
3.18.2
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
djangorestframework@3.14.0
3.18.2
1
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
djangorestframework@3.15.2
3.18.2
1
ddosify/selfhosted_backend:3.2.93c11e3182652
djangorestframework@3.15.1
3.18.2
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
djangorestframework@3.15.0
3.18.2
1
ddosify/selfhosted_hammermanager:1.2.471b8768f49bc
djangorestframework@3.12.4
3.18.2
1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
djangorestframework@3.15.1
3.18.2
1
flagsmith/flagsmith-api:v2.6.0fd58556339a4
djangorestframework@3.12.1
3.18.2
1
galaxy/cloudman-server:lateste5c265fe9fcd
djangorestframework@3.13.1
3.18.2
1
gethue/hue:4.11.011b649636e68
djangorestframework@3.12.2
3.18.2
1
gethue/hue:4.10.05702b2c37ff9
djangorestframework@3.12.2
3.18.2
1
gethue/hue:latest7d5c1b9f8a79
djangorestframework@3.15.2
3.18.2
1
grafana/oncall:v1.13.11159b6b836fed
djangorestframework@3.15.2
3.18.2
1
grafana/oncall:v1.16.5499851658393
djangorestframework@3.15.2
3.18.2
1
heartexlabs/label-studio:latestafcc516a2277
djangorestframework@3.17.2
3.18.2
1
hhyo/archery:v1.9.11aa41843419e
djangorestframework@3.13.1
3.18.2
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
djangorestframework@3.15.2
3.18.2
1
kobotoolbox/kobocat:2.022.24ab15679454415
djangorestframework@3.13.1
3.18.2
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
djangorestframework@3.13.1
3.18.2
1
kporwit/vinyl_lib_app:v0.1.1217de0302218
djangorestframework@3.13.1
3.18.2
1
linuxserver/babybuddy:1.10.2f7d7c7704249
djangorestframework@3.13.1
3.18.2
1
makeplane/backend-commercial:v3.3.39f650887385e
djangorestframework@3.18.0
3.18.2
1
microslac/auth:latest5c1eb1f5c64d
djangorestframework@3.14.0
3.18.2
1
microslac/conversations:latest1b24afcd71ff
djangorestframework@3.14.0
3.18.2
1
microslac/teams:latest0f75997fcbe5
djangorestframework@3.14.0
3.18.2
1
microslac/users:latest216ea6832a56
djangorestframework@3.14.0
3.18.2
1
netboxcommunity/netbox:v3.2.83d652dca5351
djangorestframework@3.13.1
3.18.2
1
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
djangorestframework@3.17.1
3.18.2
1
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
djangorestframework@3.14.0
3.18.2
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
djangorestframework@3.16.1
3.18.2
1
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
djangorestframework@3.15.1
3.18.2
1
opennode/waldur-mastermind:8.1.382e8f276c5ed
djangorestframework@3.18.0
3.18.2
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.