StackRadar

CVE-2026-73229

Medium

Advisory

Published 1 Sept 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
86
of 17,781 indexed, latest versions
Container images
87
deployed by those charts
Fix available
1 of 1
affected package

Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests

Carried by container images the latest versions of 86 of 17,781 indexed charts deploy, on 87 images.

Affected packageAffected versionsFixed inImages
djangorestframeworkpypi3.7.7, 3.11.0, 3.11.1, 3.12.1+10 more3.17.287
OSV records
GHSA-g47c-3xmw-q6m2
Also known as
PYSEC-2026-3828

Charts affected

86 by stars
ChartLatestAffected imagesRadar Score
authentikgoauthentikOfficialVerified publisher2026.8.21 of 1See more

authentik goauthentik 2026.8.2

1 of the 1 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.8.2ff8489a5af4f
djangorestframework@3.17.1
3.17.2

Open the chart page →

1,257
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
djangorestframework@3.13.1
3.17.2

Open the chart page →

9,145
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
grafana/oncall:v1.16.5499851658393
djangorestframework@3.15.2
3.17.2

Open the chart page →

16,251
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
djangorestframework@3.16.1
3.17.2

Open the chart page →

4,332
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
baserow/backend:2.3.37c00549b3a6f
djangorestframework@3.16.1
3.17.2

Open the chart page →

17,263
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
djangorestframework@3.14.0
3.17.2

Open the chart page →

27,267
netboxstartechnicaVerified publisher5.1.01 of 4See more

netbox startechnica 5.1.0

1 of the 4 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
djangorestframework@3.14.0
3.17.2

Open the chart page →

1,650
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
djangorestframework@3.15.1
3.17.2

Open the chart page →

17,404
openshift-secured-redisInsighteximiaitVerified publisher0.9.21 of 2See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
redislabs/redisinsight:1.14.0b03ab1426d0d
djangorestframework@3.13.1
3.17.2

Open the chart page →

13,874
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
flagsmith/flagsmith-api:v2.6.0fd58556339a4
djangorestframework@3.12.1
3.17.2

Open the chart page →

6,868
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
djangorestframework@3.13.1
3.17.2
kobotoolbox/kpi:2.022.24dbcacc01bccd4
djangorestframework@3.13.1
3.17.2

Open the chart page →

18,517
open-zaakopen-zaak0.8.01 of 3See more

open-zaak open-zaak 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
openzaak/open-zaak:1.6.02ca2ea6e0ae9
djangorestframework@3.12.4
3.17.2

Open the chart page →

4,045
pretixtechwolf12Verified publisher2026.7.01 of 3See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
pretix/standalone:2026.7.05df3b7aa852e
djangorestframework@3.17.1
3.17.2

Open the chart page →

9,770
wgerwgerOfficialVerified publisher1.0.01 of 8See more

wger wger 1.0.0

1 of the 8 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
wger/server:2.6997ead43aabd
djangorestframework@3.17.1
3.17.2

Open the chart page →

8,491
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
djangorestframework@3.16.1
3.17.2

Open the chart page →

12,037
psonoankra-chartsVerified publisher1.2.01 of 2See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
psono/psono-server:5.0.03b974b43ea03
djangorestframework@3.15.2
3.17.2

Open the chart page →

2,388
anteonanteonVerified publisher2.6.43 of 13See more

anteon anteon 2.6.4

3 of the 13 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
djangorestframework@3.15.2
3.17.2
ddosify/selfhosted_backend:3.2.93c11e3182652
djangorestframework@3.15.1
3.17.2
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
djangorestframework@3.15.1
3.17.2

Open the chart page →

22,202
squestchristianhuthVerified publisher6.6.71 of 4See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
djangorestframework@3.16.0
3.17.2

Open the chart page →

9,971
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
djangorestframework@3.15.2
3.17.2

Open the chart page →

13,761
weblatedeliveryheroVerified publisher0.3.21 of 3See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
djangorestframework@3.11.1
3.17.2

Open the chart page →

7,984
archerydoubanVerified publisher0.4.31 of 6See more

archery douban 0.4.3

1 of the 6 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
hhyo/archery:v1.9.11aa41843419e
djangorestframework@3.13.1
3.17.2

Open the chart page →

5,853
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
djangorestframework@3.14.0
3.17.2

Open the chart page →

10,858
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
djangorestframework@3.15.1
3.17.2

Open the chart page →

1,965
paperlessgeek-cookbookVerified publisher9.2.01 of 1See more

paperless geek-cookbook 9.2.0

1 of the 1 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
djangorestframework@3.13.1
3.17.2

Open the chart page →

3,924
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
djangorestframework@3.13.1
3.17.2

Open the chart page →

7,801
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
djangorestframework@3.15.2
3.17.2

Open the chart page →

12,397
aralib42Verified publisher0.4.61 of 1See more

ara lib42 0.4.6

1 of the 1 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
recordsansible/ara-api:latest9dfd6e18f474
djangorestframework@3.17.1
3.17.2

Open the chart page →

120
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
djangorestframework@3.16.0
3.17.2

Open the chart page →

6,873
open-notificatiesopen-zaak0.7.01 of 4See more

open-notificaties open-zaak 0.7.0

1 of the 4 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
openzaak/open-notificaties:1.3.02e65313b9b10
djangorestframework@3.12.4
3.17.2

Open the chart page →

2,850
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
djangorestframework@3.15.2
3.17.2

Open the chart page →

8,158
sentry-k8ssentry-k8sVerified publisher1.4.11 of 11See more

sentry-k8s sentry-k8s 1.4.1

1 of the 11 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
djangorestframework@3.16.1
3.17.2

Open the chart page →

16,449
verbacapverbacapVerified publisher1.0.71 of 1See more

verbacap verbacap 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
djangorestframework@3.15.1
3.17.2

Open the chart page →

2,233
waldurwaldur-chartsVerified publisher8.1.21 of 3See more

waldur waldur-charts 8.1.2

1 of the 3 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
opennode/waldur-mastermind:8.1.24c82b15d9042
djangorestframework@3.16.1
3.17.2

Open the chart page →

4,839
qleverzazukoVerified publisher0.7.01 of 2See more

qlever zazuko 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
ghcr.io/zazukoians/qlever-ui:v0.10.034c7b540a095
djangorestframework@3.17.1
3.17.2

Open the chart page →

2,900
ddosifyanteonVerified publisher1.7.53 of 13See more

ddosify anteon 1.7.5

3 of the 13 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
djangorestframework@3.14.0
3.17.2
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
djangorestframework@3.15.0
3.17.2
ddosify/selfhosted_hammermanager:1.2.471b8768f49bc
djangorestframework@3.12.4
3.17.2

Open the chart page →

25,669
argonix-apiargonix0.2.01 of 4See more

argonix-api argonix 0.2.0

1 of the 4 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
djangorestframework@3.17.1
3.17.2

Open the chart page →

4,923
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
djangorestframework@3.12.2
3.17.2

Open the chart page →

22,891
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
djangorestframework@3.15.1
3.17.2

Open the chart page →

10,145
bdbablackduck2026.6.31 of 9See more

bdba blackduck 2026.6.3

1 of the 9 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
blackducksoftware/bdba-frontend:2026.6.3b10eaea94fd3
djangorestframework@3.16.1
3.17.2

Open the chart page →

9,521
camerahubcamerahub0.10.211 of 2See more

camerahub camerahub 0.10.21

1 of the 2 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
camerahub/camerahub:0.36.23a5af37dd6e1b
djangorestframework@3.14.0
3.17.2

Open the chart page →

2,507
opencvecfi20170.1.21 of 7See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
ghcr.io/cfi2017/opencve-web:3.0.06961eab190a2
djangorestframework@3.15.2
3.17.2

Open the chart page →

15,371
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
djangorestframework@3.12.4
3.17.2

Open the chart page →

12,457
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
djangorestframework@3.12.4
3.17.2

Open the chart page →

12,131
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
djangorestframework@3.12.4
3.17.2

Open the chart page →

11,592
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
djangorestframework@3.13.1
3.17.2

Open the chart page →

16,069
authentikcluster-deploy0.2.01 of 1See more

authentik cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
djangorestframework@3.17.1
3.17.2

Open the chart page →

2,481
csghubcsghubVerified publisher2.4.31 of 34See more

csghub csghub 2.4.3

1 of the 34 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
opencsghq/label-studio:v2.4.0b4e849fcf94a
djangorestframework@3.15.2
3.17.2

Open the chart page →

58,897
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
djangorestframework@3.15.1
3.17.2

Open the chart page →

11,335
dataflowcsghubVerified publisher2.5.01 of 7See more

dataflow csghub 2.5.0

1 of the 7 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
opencsghq/label-studio:v2.5.047e22aa71870
djangorestframework@3.15.2
3.17.2

Open the chart page →

6,632
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-73229.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
djangorestframework@3.15.2
3.17.2

Open the chart page →

6,075

Container images carrying it

87 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
redislabs/redisinsight:1.14.0b03ab1426d0d
djangorestframework@3.13.1
3.17.2
1
seafileltd/seafile-mc:9.0.106693911bcc40
djangorestframework@3.11.1
3.17.2
1
seafileltd/seafile-mc:10.0.170628f29c663
djangorestframework@3.14.0
3.17.2
1
seafileltd/seafile-mc:9.0.97ac833196f60
djangorestframework@3.11.1
3.17.2
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
djangorestframework@3.14.0
3.17.2
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
djangorestframework@3.11.1
3.17.2
1
signalen/backend:2.50.14760256000738
djangorestframework@3.15.2
3.17.2
1
sissbruecker/linkding:1.46.20c0a9a04c7eb
djangorestframework@3.16.1
3.17.2
1
sissbruecker/linkding:1.35.00c5dddf0b37c
djangorestframework@3.15.2
3.17.2
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
djangorestframework@3.15.2
3.17.2
1
vabene1111/recipes:2.3.50f8d061895e9
djangorestframework@3.16.1
3.17.2
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
djangorestframework@3.13.1
3.17.2
1
weblate/weblate:3.11.3-182848df56ecd
djangorestframework@3.11.0
3.17.2
1
wger/server:2.6997ead43aabd
djangorestframework@3.17.1
3.17.2
1
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
djangorestframework@3.17.1
3.17.2
1
ghcr.io/cfi2017/opencve-web:3.0.06961eab190a2
djangorestframework@3.15.2
3.17.2
1
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
djangorestframework@3.15.1
3.17.2
1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
djangorestframework@3.16.1
3.17.2
1
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
djangorestframework@3.16.1
3.17.2
1
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
djangorestframework@3.17.1
3.17.2
1
ghcr.io/goauthentik/server:2026.8.2ff8489a5af4f
djangorestframework@3.17.1
3.17.2
1
ghcr.io/libretime/libretime-api:latesteae026cc8909
djangorestframework@3.15.2
3.17.2
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
djangorestframework@3.15.1
3.17.2
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
djangorestframework@3.15.2
3.17.2
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
djangorestframework@3.16.1
3.17.2
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
djangorestframework@3.16.1
3.17.2
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
djangorestframework@3.16.1
3.17.2
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
djangorestframework@3.13.1
3.17.2
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
djangorestframework@3.14.0
3.17.2
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
djangorestframework@3.16.1
3.17.2
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
djangorestframework@3.15.2
3.17.2
1
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
djangorestframework@3.16.1
3.17.2
1
ghcr.io/substra/substra-backend:1.0.121967f54ec86
djangorestframework@3.15.2
3.17.2
1
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
djangorestframework@3.15.2
3.17.2
1
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
djangorestframework@3.16.0
3.17.2
1
ghcr.io/zazukoians/qlever-ui:v0.10.034c7b540a095
djangorestframework@3.17.1
3.17.2
1
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
djangorestframework@3.16.0
3.17.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.