CVE-2026-6907
MediumAdvisory
Published 5 May 2026In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.004
- 29th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 13
- of 17,781 indexed, latest versions
- Container images
- 13
- deployed by those charts
- Fix available
- 1 of 1
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 13 of 17,781 indexed charts deploy, on 13 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| djangopypi | 5.2.3, 5.2.7, 5.2.8, 5.2.11+3 more | 5.2.14 | 13 |
- OSV records
- PYSEC-2026-55
- Also known as
- BIT-django-2026-6907, GHSA-5hrc-gvxj-w55p
Charts affected
13 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| paperless-ngxalexmorbo-paperless-ngxVerified publisher | 0.2.0 | 1 of 2See more | 12,037 |
| openvaultopenvaultVerified publisher | 0.8.1 | 1 of 2See more | 6,873 |
| qleverzazukoVerified publisher | 0.7.0 | 1 of 2See more | 2,900 |
| opencvecfi2017 | 0.1.2 | 1 of 7See more | 15,371 |
| adventurelogdjjudas21Verified publisher | 0.1.1 | 1 of 3See more | 7,459 |
| chiefonboardinghelmforgeVerified publisher | 1.1.14 | 1 of 3See more | 10,849 |
| ja-shortenerja-shortenerVerified publisher | 0.1.0 | 1 of 2See more | 2,089 |
| paperlessk8s-home-lab-repo | 11.0.1 | 1 of 1See more | 9,103 |
| authentikkagiso-me | 0.1.1 | 1 of 1See more | 4,568 |
| paperless-ngxmt190502 | 7.6.14 | 1 of 4See more | 11,950 |
| linkdingpascaliskeVerified publisher | 3.0.0 | 1 of 1See more | 3,854 |
| paperless-ngxrtomik-helm-chartsVerified publisher | 0.0.5 | 1 of 1See more | 10,605 |
| tandoorrtomik-helm-chartsVerified publisher | 0.0.1 | 1 of 1See more | 4,499 |
Container images carrying it
13 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| chiefonboarding/ | 59bc7aa60fe7 | django | 5.2.14 | 1 |
| cr0hn/ | 14482d0bc4a1 | django | 5.2.14 | 1 |
| vabene1111/ | 0f8d061895e9 | django | 5.2.14 | 1 |
| ghcr.io/ | 6961eab190a2 | django | 5.2.14 | 1 |
| ghcr.io/ | 46a71d75dfd3 | django | 5.2.14 | 1 |
| ghcr.io/ | 4b05bcd28e69 | django | 5.2.14 | 1 |
| ghcr.io/ | 57ad9565bff3 | django | 5.2.14 | 1 |
| ghcr.io/ | 665f2f5cc548 | django | 5.2.14 | 1 |
| ghcr.io/ | b89f83345532 | django | 5.2.14 | 1 |
| ghcr.io/ | 0250d9cb0d74 | django | 5.2.14 | 1 |
| ghcr.io/ | 61b2eb9eed8e | django | 5.2.14 | 1 |
| ghcr.io/ | 6df27f944fe8 | django | 5.2.14 | 1 |
| ghcr.io/ | 34c7b540a095 | django | 5.2.14 | 1 |