StackRadar

GHSA-27jp-wm6q-gp25

Medium

Advisory

Published 13 Feb 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
111
of 17,781 indexed, latest versions
Container images
111
deployed by those charts
Fix available
1 of 1
affected package

sqlparse: formatting list of tuples leads to denial of service

Carried by container images the latest versions of 111 of 17,781 indexed charts deploy, on 111 images.

Affected packageAffected versionsFixed inImages
sqlparsepypi0.1.16, 0.2.2, 0.2.4, 0.3.0+8 more0.5.4111
OSV records
GHSA-27jp-wm6q-gp25

Charts affected

111 by stars
ChartLatestAffected imagesRadar Score
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
sqlparse@0.5.0
0.5.4

Open the chart page →

10,145
camerahubcamerahub0.10.211 of 2See more

camerahub camerahub 0.10.21

1 of the 2 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
camerahub/camerahub:0.36.23a5af37dd6e1b
sqlparse@0.4.4
0.5.4

Open the chart page →

2,507
opencvecfi20170.1.21 of 7See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
sqlparse@0.5.3
0.5.4

Open the chart page →

15,371
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
sqlparse@0.2.4
0.5.4

Open the chart page →

5,060
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
sqlparse@0.4.2
0.5.4

Open the chart page →

12,457
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
sqlparse@0.4.2
0.5.4

Open the chart page →

12,131
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
sqlparse@0.4.2
0.5.4

Open the chart page →

11,592
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
sqlparse@0.4.2
0.5.4

Open the chart page →

16,069
galaxy-stablecloudve2.0.01 of 5See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
sqlparse@0.1.16
0.5.4

Open the chart page →

70,895
csghubcsghubVerified publisher2.4.31 of 34See more

csghub csghub 2.4.3

1 of the 34 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
opencsghq/label-studio:v2.4.0b4e849fcf94a
sqlparse@0.5.0
0.5.4

Open the chart page →

58,897
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
sqlparse@0.4.4
0.5.4

Open the chart page →

11,335
dataflowcsghubVerified publisher2.5.01 of 7See more

dataflow csghub 2.5.0

1 of the 7 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
opencsghq/label-studio:v2.5.047e22aa71870
sqlparse@0.5.0
0.5.4

Open the chart page →

6,632
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
sqlparse@0.5.0
0.5.4

Open the chart page →

5,062
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
sqlparse@0.5.1
0.5.4

Open the chart page →

6,075
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
sqlparse@0.3.1
0.5.4

Open the chart page →

4,422
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
sqlparse@0.4.3
0.5.4

Open the chart page →

14,856
devops-diplomdevops-diplom-chartVerified publisher0.8.01 of 2See more

devops-diplom devops-diplom-chart 0.8.0

1 of the 2 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
alexeyr7/sf-test-app:latestdf0b41fdbd53
sqlparse@0.4.2
0.5.4

Open the chart page →

2,548
codecovdoubanVerified publisher0.2.42 of 8See more

codecov douban 0.2.4

2 of the 8 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
sqlparse@0.4.4
0.5.4
codecov/self-hosted-worker:24.4.1837f546b479b
sqlparse@0.4.4
0.5.4

Open the chart page →

24,917
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
sqlparse@0.4.3
0.5.4

Open the chart page →

25,122
escvmschedulerescvmscheduler1.0.71 of 3See more

escvmscheduler escvmscheduler 1.0.7

1 of the 3 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
swisscomcloud/esc-vm-scheduler-web:latestb6639d1a922e
sqlparse@0.4.3
0.5.4

Open the chart page →

4,678
infrafibonacci-cluster-infraVerified publisher1.0.01 of 4See more

infra fibonacci-cluster-infra 1.0.0

1 of the 4 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
dpage/pgadmin4:8.418cd5711fc9a
sqlparse@0.4.4
0.5.4

Open the chart page →

12,454
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
sqlparse@0.2.4
0.5.4

Open the chart page →

64,489
tandoorgabe565Verified publisher0.9.91 of 2See more

tandoor gabe565 0.9.9

1 of the 2 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
sqlparse@0.5.3
0.5.4

Open the chart page →

2,183
babybuddygeek-cookbookVerified publisher1.2.21 of 1See more

babybuddy geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
linuxserver/babybuddy:1.10.2f7d7c7704249
sqlparse@0.4.2
0.5.4

Open the chart page →

1,489
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
sqlparse@0.4.1
0.5.4

Open the chart page →

24,293
ldap-backupgluuVerified publisher1.6.111 of 1See more

ldap-backup gluu 1.6.11

1 of the 1 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
gluufederation/opendj:4.3.0_011a1128b28b95
sqlparse@0.4.2
0.5.4

Open the chart page →

3,064
pgadminhalkeye1.0.01 of 1See more

pgadmin halkeye 1.0.0

1 of the 1 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
chorss/docker-pgadmin4:4.115c549cacb8ab
sqlparse@0.2.4
0.5.4

Open the chart page →

2,555
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
sqlparse@0.5.0
0.5.4

Open the chart page →

4,647
mlflowhelm-charts-nr1.0.101 of 1See more

mlflow helm-charts-nr 1.0.10

1 of the 1 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
sqlparse@0.3.1
0.5.4

Open the chart page →

4,422
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
sqlparse@0.3.1
0.5.4

Open the chart page →

7,984
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
sqlparse@0.4.4
0.5.4

Open the chart page →

16,384
erpnextimprowisedVerified publisher3.3.01 of 3See more

erpnext improwised 3.3.0

1 of the 3 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
improwised/erpnext-worker:v13.4.197280b55cbd4
sqlparse@0.4.1
0.5.4

Open the chart page →

6,501
healthchecksimprowisedVerified publisher1.1.11 of 2See more

healthchecks improwised 1.1.1

1 of the 2 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
linuxserver/healthchecks:2.7.2023033194696dab3c50
sqlparse@0.4.3
0.5.4

Open the chart page →

2,628
redashinseefrlab2.1.01 of 3See more

redash inseefrlab 2.1.0

1 of the 3 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
redash/redash:10.0.0.b503639392753c0376
sqlparse@0.3.0
0.5.4

Open the chart page →

3,314
ja-shortenerja-shortenerVerified publisher0.1.01 of 2See more

ja-shortener ja-shortener 0.1.0

1 of the 2 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
cr0hn/ja-shortener:v0.1.414482d0bc4a1
sqlparse@0.5.3
0.5.4

Open the chart page →

2,089
shynetjuniorjpdj0.1.301 of 1See more

shynet juniorjpdj 0.1.30

1 of the 1 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.13.1ba54f7797a6b
sqlparse@0.4.4
0.5.4

Open the chart page →

2,581
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
sqlparse@0.5.3
0.5.4

Open the chart page →

9,103
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
sqlparse@0.4.2
0.5.4

Open the chart page →

16,417
mlflowkelvins0.4.01 of 3See more

mlflow kelvins 0.4.0

1 of the 3 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
kelvinsp/mlflow:1.26.1cd33e6db2a59
sqlparse@0.4.2
0.5.4

Open the chart page →

4,156
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
sqlparse@0.5.3
0.5.4

Open the chart page →

8,405
large-systems-djangolarge-systems-djangoVerified publisher1.0.01 of 1See more

large-systems-django large-systems-django 1.0.0

1 of the 1 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
ha33ona/python:test6affdfc644d0
sqlparse@0.4.2
0.5.4

Open the chart page →

3,891
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
sqlparse@0.5.1
0.5.4

Open the chart page →

37,942
mlflow-servermlflow-server0.3.01 of 1See more

mlflow-server mlflow-server 0.3.0

1 of the 1 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
ghcr.io/mlops-for-all/mlflow-tracking-server:3.8-1.30.1-v1.0.0d30e631684c3
sqlparse@0.4.4
0.5.4

Open the chart page →

3,158
mlflowmondata-helm-chartsVerified publisher0.2.31 of 1See more

mlflow mondata-helm-charts 0.2.3

1 of the 1 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
mondata/mlflow:v2.3.0.s3.gc6f94c6caf8bf
sqlparse@0.4.4
0.5.4

Open the chart page →

3,811
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
sqlparse@0.5.3
0.5.4

Open the chart page →

11,950
mlflowncsaVerified publisher1.2.11 of 4See more

mlflow ncsa 1.2.1

1 of the 4 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
evk02/mlflow:2.2.1ef6ff257ef35
sqlparse@0.4.3
0.5.4

Open the chart page →

5,456
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
sqlparse@0.5.0
0.5.4

Open the chart page →

4,749
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
sqlparse@0.4.2
0.5.4

Open the chart page →

22,084
libretimepodzone-chartsVerified publisher0.4.11 of 9See more

libretime podzone-charts 0.4.1

1 of the 9 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
ghcr.io/libretime/libretime-api:latesteae026cc8909
sqlparse@0.5.3
0.5.4

Open the chart page →

11,149
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry GHSA-27jp-wm6q-gp25.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
sqlparse@0.5.1
0.5.4

Open the chart page →

21,211

Container images carrying it

111 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
sqlparse@0.5.1
0.5.4
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
sqlparse@0.5.3
0.5.4
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
sqlparse@0.5.3
0.5.4
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
sqlparse@0.5.3
0.5.4
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
sqlparse@0.4.2
0.5.4
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
sqlparse@0.4.4
0.5.4
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
sqlparse@0.5.3
0.5.4
1
ghcr.io/substra/substra-backend:1.0.121967f54ec86
sqlparse@0.5.3
0.5.4
1
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
sqlparse@0.5.3
0.5.4
1
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
sqlparse@0.5.3
0.5.4
1
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
sqlparse@0.5.3
0.5.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.