StackRadarChart IndexLive demo

CVE-2026-15830

Medium

Advisory

Published 4 Aug 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.9; base score, highest
EPSS: 0.013; 68th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 112; of 17,781 indexed, latest versions
Container images: 107; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 112 of 17,781 indexed charts deploy, on 107 images.

Affected package	Affected versions	Fixed in	Images
djangopypi	1.11.11, 1.11.24, 1.11.29, 2.2.13+64 more	5.2.17	107

OSV records: PYSEC-2026-3717
Also known as: BIT-django-2026-15830

Charts affected

112 by stars

Chart

Latest

Affected images

Radar Score

libretimepodzone-charts

1 of 9 See more

libretime podzone-charts 0.4.1

1 of the 9 container images this version deploys carry CVE-2026-15830.

Container image	Digest	Package	Fixed in
ghcr.io/libretime/libretime-api :latest	eae026cc8909	django@4.2.23	5.2.17

Open the chart page →

11,149

reviewboardrock8s

1 of 3 See more

reviewboard rock8s 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-15830.

Container image	Digest	Package	Fixed in
beanbag/reviewboard :latest	6b840f546e1c	django@4.2.30	5.2.17

Open the chart page →

6,084

paperless-ngxrtomik-helm-charts

1 of 1 See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-15830.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	django@5.2.7	5.2.17

Open the chart page →

10,605

tandoorrtomik-helm-charts

1 of 1 See more

tandoor rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-15830.

Container image	Digest	Package	Fixed in
vabene1111/recipes :2.3.5	0f8d061895e9	django@5.2.8	5.2.17

Open the chart page →

4,499

linkdingrubxkube

1 of 1 See more

linkding rubxkube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-15830.

Container image	Digest	Package	Fixed in
sissbruecker/linkding :1.46.2	0c0a9a04c7eb	django@6.0.7	5.2.17

Open the chart page →

2,051

safe-config-servicesafe-global

1 of 3 See more

safe-config-service safe-global 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-15830.

Container image	Digest	Package	Fixed in
safeglobal/safe-config-service :latest	09a5e495c219	django@6.0.5	5.2.17

Open the chart page →

1,577

safe-stacksafe-global

2 of 9 See more

safe-stack safe-global 0.1.0

2 of the 9 container images this version deploys carry CVE-2026-15830.

Container image	Digest	Package	Fixed in
safeglobal/safe-config-service :latest	09a5e495c219	django@6.0.5	5.2.17
safeglobal/safe-transaction-service :latest	80db836cc5d5	django@5.2.15	5.2.17

Open the chart page →

19,560

safe-transaction-servicesafe-global

1 of 6 See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-15830.

Container image	Digest	Package	Fixed in
safeglobal/safe-transaction-service :latest	80db836cc5d5	django@5.2.15	5.2.17

Open the chart page →

16,620

backendsignalen

1 of 4 See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2026-15830.

Container image	Digest	Package	Fixed in
signalen/backend :2.50.14	760256000738	django@4.2.30	5.2.17

Open the chart page →

11,636

weblateslamdev

1 of 2 See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2026-15830.

Container image	Digest	Package	Fixed in
weblate/weblate :3.11.3-1	82848df56ecd	django@3.0.4	5.2.17

Open the chart page →

8,694

substra-backendsubstra

1 of 7 See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry CVE-2026-15830.

Container image	Digest	Package	Fixed in
ghcr.io/substra/substra-backend :1.0.1	21967f54ec86	django@4.2.16	5.2.17

Open the chart page →

4,731

vinyl-lib-chartvinyl-lib

1 of 1 See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15830.

Container image	Digest	Package	Fixed in
kporwit/vinyl_lib_app :v0.1.1	217de0302218	django@4.0.5	5.2.17

Open the chart page →

3,392

Container images carrying it

107 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/seanmorley15/adventurelog-backend :v0.13.0	0250d9cb0d74	django@5.2.13	5.2.17	1
ghcr.io/sissbruecker/linkding :1.45.0	61b2eb9eed8e	django@6.0	5.2.17	1
ghcr.io/substra/substra-backend :1.0.1	21967f54ec86	django@4.2.16	5.2.17	1
ghcr.io/tandoorrecipes/recipes :1.5.31	063eb446e298	django@4.2.18	5.2.17	1
ghcr.io/wgbh-mla/ov-wag :v1.1.0	6df27f944fe8	django@5.2.3	5.2.17	1
ghcr.io/zazukoians/qlever-ui :v0.10.0	34c7b540a095	django@5.2.12	5.2.17	1
quay.io/hewlettpackardenterprise/squest :2.8.4	65694109877e	django@4.2.21	5.2.17	1