StackRadarChart IndexLive demo

GHSA-gj48-438w-jh9v

Medium

Advisory

Published 16 Jun 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.1; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 65; of 17,781 indexed, latest versions
Container images: 62; deployed by those charts
Fix available: 1 of 1; affected package

Bleach clean() / Cleaner() fails to sanitize dangerous URI schemes in allowed formaction attributes

Carried by container images the latest versions of 65 of 17,781 indexed charts deploy, on 62 images.

Affected package	Affected versions	Fixed in	Images
bleachpypi	1.5.0, 2.1.2, 3.0.2, 3.1.0+12 more	6.4.0	62

OSV records: GHSA-gj48-438w-jh9v

Charts affected

65 by stars

Chart

Latest

Affected images

Radar Score

jupyterhubkubeblocks

1 of 7 See more

jupyterhub kubeblocks 0.1.0

1 of the 7 container images this version deploys carry GHSA-gj48-438w-jh9v.

Container image	Digest	Package	Fixed in
jupyterhub/k8s-singleuser-sample :3.0.1-0.dev.git.6287.hbfb05cd6	8e4778efec8e	bleach@6.0.0	6.4.0

Open the chart page →

7,356

kyso-nbdimekyso

1 of 1 See more

kyso-nbdime kyso 1.0.0

1 of the 1 container images this version deploys carry GHSA-gj48-438w-jh9v.

Container image	Digest	Package	Fixed in
kyso/kyso-nbdime :latest	4aa9d38ee81d	bleach@5.0.1	6.4.0

Open the chart page →

2,765

linkdinglinkding

1 of 1 See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry GHSA-gj48-438w-jh9v.

Container image	Digest	Package	Fixed in
sissbruecker/linkding :1.41.0-plus	a222fb777e1f	bleach@6.1.0	6.4.0

Open the chart page →

37,942

paperless-ngxmt190502

1 of 4 See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry GHSA-gj48-438w-jh9v.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	bleach@6.3.0	6.4.0

Open the chart page →

11,950

home-assistantpascaliske

1 of 1 See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry GHSA-gj48-438w-jh9v.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2025.12.5	9a5a3eb4a213	bleach@6.3.0	6.4.0

Open the chart page →

4,749

linkdingpascaliske

1 of 1 See more

linkding pascaliske 3.0.0

1 of the 1 container images this version deploys carry GHSA-gj48-438w-jh9v.

Container image	Digest	Package	Fixed in
ghcr.io/sissbruecker/linkding :1.45.0	61b2eb9eed8e	bleach@6.3.0	6.4.0

Open the chart page →

3,854

seafilephybros-helm-charts

1 of 1 See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry GHSA-gj48-438w-jh9v.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :9.0.9	7ac833196f60	bleach@4.1.0	6.4.0

Open the chart page →

22,084

matrix-stackrock8s

1 of 7 See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry GHSA-gj48-438w-jh9v.

Container image	Digest	Package	Fixed in
matrixdotorg/synapse :v1.127.1	c3c4a9de2a0b	bleach@6.2.0	6.4.0

Open the chart page →

9,256

paperless-ngxrtomik-helm-charts

1 of 1 See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry GHSA-gj48-438w-jh9v.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	bleach@6.3.0	6.4.0

Open the chart page →

10,605

tandoorrtomik-helm-charts

1 of 1 See more

tandoor rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry GHSA-gj48-438w-jh9v.

Container image	Digest	Package	Fixed in
vabene1111/recipes :2.3.5	0f8d061895e9	bleach@6.2.0	6.4.0

Open the chart page →

4,499

weblateslamdev

1 of 2 See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry GHSA-gj48-438w-jh9v.

Container image	Digest	Package	Fixed in
weblate/weblate :3.11.3-1	82848df56ecd	bleach@3.1.1	6.4.0

Open the chart page →

8,694

studygovernorstudy-governor

1 of 3 See more

studygovernor study-governor 0.1.38

1 of the 3 container images this version deploys carry GHSA-gj48-438w-jh9v.

Container image	Digest	Package	Fixed in
registry.gitlab.com/radiology/infrastructure/study-governor :8.0.0	4e7faf6f8d5f	bleach@5.0.1	6.4.0

Open the chart page →

1,447

tezos-nodetezos-node

1 of 4 See more

tezos-node tezos-node 1.0.0

1 of the 4 container images this version deploys carry GHSA-gj48-438w-jh9v.

Container image	Digest	Package	Fixed in
oxheadalpha/tezos-k8s-utils :5.3.4	d9faed45bf1c	bleach@4.1.0	6.4.0

Open the chart page →

5,321

synapsetranhailong

1 of 2 See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry GHSA-gj48-438w-jh9v.

Container image	Digest	Package	Fixed in
matrixdotorg/synapse :v1.78.0	def97fd537d8	bleach@6.0.0	6.4.0

Open the chart page →

3,164

calibre-webvista

1 of 1 See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry GHSA-gj48-438w-jh9v.

Container image	Digest	Package	Fixed in
linuxserver/calibre-web :0.6.24	241009026e6f	bleach@6.1.0	6.4.0

Open the chart page →

7,628

Container images carrying it

62 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/linuxserver/calibre-web :0.6.26	7c0464228f2f	bleach@6.2.0	6.4.0	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	bleach@6.1.0	6.4.0	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	bleach@6.3.0	6.4.0	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	bleach@6.3.0	6.4.0	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	bleach@6.3.0	6.4.0	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	bleach@6.1.0	6.4.0	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	bleach@6.3.0	6.4.0	1
ghcr.io/sissbruecker/linkding :1.45.0	61b2eb9eed8e	bleach@6.3.0	6.4.0	1
ghcr.io/tandoorrecipes/recipes :1.5.31	063eb446e298	bleach@6.0.0	6.4.0	1
quay.io/galaxyproject/galaxy-min :26.1.1	2c324c9789f5	bleach@6.3.0	6.4.0	1
quay.io/hewlettpackardenterprise/squest :2.8.4	65694109877e	bleach@6.2.0	6.4.0	1
registry.gitlab.com/radiology/infrastructure/study-governor :8.0.0	4e7faf6f8d5f	bleach@5.0.1	6.4.0	1