StackRadar

GHSA-pw6j-qg29-8w7f

Medium

Advisory

Published 15 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
104
of 17,781 indexed, latest versions
Container images
109
deployed by those charts
Fix available
1 of 1
affected package

Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse

Carried by container images the latest versions of 104 of 17,781 indexed charts deploy, on 109 images.

Affected packageAffected versionsFixed inImages
tornadopypi2.4.1, 4.5.3, 5.1.1, 6.0.2+13 more6.5.7109
OSV records
GHSA-pw6j-qg29-8w7f

Charts affected

104 by stars
ChartLatestAffected imagesRadar Score
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
tornado@6.4
6.5.7

Open the chart page →

11,367
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
grafana/oncall:v1.16.5499851658393
tornado@6.5.1
6.5.7

Open the chart page →

16,251
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
tornado@6.1
6.5.7

Open the chart page →

7,705
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
tornado@6.4.1
6.5.7

Open the chart page →

6,543
daskdask2024.1.12 of 2See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
ghcr.io/dask/dask:2024.1.0080150de7d86
tornado@6.3.3
6.5.7
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
tornado@6.3.3
6.5.7

Open the chart page →

12,746
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
tornado@6.4
6.5.7

Open the chart page →

6,041
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
tornado@6.1
6.5.7
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
tornado@6.0.4
6.5.7

Open the chart page →

52,919
daskhubdask2024.1.12 of 9See more

daskhub dask 2024.1.1

2 of the 9 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
pangeo/base-notebook:2024.01.155fbe688a4f80
tornado@6.3.3
6.5.7
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
tornado@6.3.3
6.5.7

Open the chart page →

14,094
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
tornado@6.4.1
6.5.7

Open the chart page →

17,404
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
tornado@6.5.4
6.5.7

Open the chart page →

9,316
esphomegeek-cookbookVerified publisher8.4.21 of 1See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
esphome/esphome:1.18.03f51ec10e823
tornado@6.1
6.5.7

Open the chart page →

3,717
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
tornado@6.5.2
6.5.7

Open the chart page →

12,037
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
tornado@6.4.1
6.5.7

Open the chart page →

22,202
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
tornado@4.5.3
6.5.7

Open the chart page →

36,094
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
tornado@6.4
6.5.7

Open the chart page →

11,205
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
tornado@6.4.1
6.5.7

Open the chart page →

13,761
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
apsl/thumbor:6.7.051e2de5c2c70
tornado@5.1.1
6.5.7

Open the chart page →

38,346
datacube-explorerdatacube-charts0.5.321 of 1See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
opendatacube/explorer:latest120457ffcd69
tornado@6.5.2
6.5.7

Open the chart page →

4,854
craftycontrollerdrewburr-labs-helm-chartsVerified publisher0.3.01 of 1See more

craftycontroller drewburr-labs-helm-charts 0.3.0

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
tornado@6.5.4
6.5.7

Open the chart page →

3,671
copypartyernail-copyparty2.0.01 of 1See more

copyparty ernail-copyparty 2.0.0

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
copyparty/ac:1.19.200a0a8605062c
tornado@6.5.1
6.5.7

Open the chart page →

1,685
deepstackgeek-cookbookVerified publisher1.5.21 of 2See more

deepstack geek-cookbook 1.5.2

1 of the 2 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
robmarkcole/deepstack-ui:latest410275726459
tornado@6.1
6.5.7

Open the chart page →

5,305
octoprintgeek-cookbookVerified publisher6.4.21 of 1See more

octoprint geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
octoprint/octoprint:1.6.1ea3bffae2470
tornado@5.1.1
6.5.7

Open the chart page →

3,153
octoprinthalkeye0.1.11 of 1See more

octoprint halkeye 0.1.1

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
octoprint/octoprint:1.4.0106c26efcd8a
tornado@4.5.3
6.5.7

Open the chart page →

3,608
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
tornado@6.5.4
6.5.7

Open the chart page →

12,397
jupyterhub-outpostjupyter-jscVerified publisher2.4.11 of 1See more

jupyterhub-outpost jupyter-jsc 2.4.1

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
jupyterjsc/jupyterhub-outpost:2.3.1aea53b13f235
tornado@6.5.5
6.5.7

Open the chart page →

1,678
medusamedusaVerified publisher1.3.81 of 1See more

medusa medusa 1.3.8

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
linuxserver/medusa:v1.0.26-ls2884477fb1ce3ca
tornado@6.5.2
6.5.7

Open the chart page →

977
open-notificatiesopen-zaak0.7.01 of 4See more

open-notificaties open-zaak 0.7.0

1 of the 4 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
openzaak/open-notificaties:1.3.02e65313b9b10
tornado@6.1
6.5.7

Open the chart page →

2,850
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
tornado@6.5.5
6.5.7

Open the chart page →

3,681
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
tornado@6.4.2
6.5.7

Open the chart page →

31,844
streamlit-appstreamlit-appVerified publisher0.2.01 of 1See more

streamlit-app streamlit-app 0.2.0

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
sruthitanneru/pi-sample:ui-lateste565ea454ffd
tornado@6.4.2
6.5.7

Open the chart page →

1,696
synapsesudermanjr1.1.51 of 1See more

synapse sudermanjr 1.1.5

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
tornado@6.1
6.5.7

Open the chart page →

3,332
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
tornado@6.4
6.5.7

Open the chart page →

6,324
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
tornado@6.5.4
6.5.7

Open the chart page →

5,558
ddosifyanteonVerified publisher1.7.51 of 13See more

ddosify anteon 1.7.5

1 of the 13 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
tornado@6.4
6.5.7

Open the chart page →

25,669
bookinfobasictechno0.1.01 of 6See more

bookinfo basictechno 0.1.0

1 of the 6 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.17.06668bcf42ef0
tornado@4.5.3
6.5.7

Open the chart page →

20,671
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
tornado@6.1
6.5.7

Open the chart page →

22,891
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
tornado@6.4.1
6.5.7

Open the chart page →

10,145
istio-bookinfobookinfo1.2.21 of 6See more

istio-bookinfo bookinfo 1.2.2

1 of the 6 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
tornado@4.5.3
6.5.7

Open the chart page →

18,980
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
tornado@5.1.1
6.5.7

Open the chart page →

2,504
daskcloudnativeapp2.2.12 of 2See more

dask cloudnativeapp 2.2.1

2 of the 2 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
daskdev/dask:1.1.04ecd7bc35500
tornado@5.1.1
6.5.7
daskdev/dask-notebook:1.1.0052630f5ca04
tornado@5.1.1
6.5.7

Open the chart page →

29,901
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
tornado@4.5.3
6.5.7

Open the chart page →

36,094
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
tornado@5.1.1
6.5.7

Open the chart page →

5,060
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
tornado@4.5.3
6.5.7

Open the chart page →

77,758
galaxycloudve6.8.61 of 3See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
tornado@6.5.5
6.5.7

Open the chart page →

4,601
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
tornado@6.5.6
6.5.7

Open the chart page →

13,220
csghubcsghubVerified publisher2.4.31 of 34See more

csghub csghub 2.4.3

1 of the 34 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
opencsghq/agenticflow:ee-v0.6-52f03fead54db
tornado@6.5.1
6.5.7

Open the chart page →

58,897
jupyterhubd4nVerified publisher3.3.72 of 7See more

jupyterhub d4n 3.3.7

2 of the 7 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
tornado@6.4.1
6.5.7
aristidetm/k8s-hub:3.3.7ccb516cb8474
tornado@6.4
6.5.7

Open the chart page →

16,604
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
tornado@6.3.3
6.5.7

Open the chart page →

6,179
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
tornado@6.0.4
6.5.7

Open the chart page →

18,863
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry GHSA-pw6j-qg29-8w7f.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
tornado@6.4.2
6.5.7

Open the chart page →

6,123

Container images carrying it

109 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
kubesphere/examples-bookinfo-productpage-v1:1.13.0378f49ec9c44
tornado@4.5.3
6.5.7
1
kyso/kyso-nbdime:latest4aa9d38ee81d
tornado@6.2
6.5.7
1
linuxserver/calibre-web:0.6.24241009026e6f
tornado@6.4.2
6.5.7
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
tornado@6.1
6.5.7
1
linuxserver/medusa:v1.0.26-ls2884477fb1ce3ca
tornado@6.5.2
6.5.7
1
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
tornado@5.1.1
6.5.7
1
litellm/litellm-non_root:v1.82.3-stable09b217802ded
tornado@6.5.5
6.5.7
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
tornado@6.1
6.5.7
1
lsstsqre/prepuller:latest19c2dfc4e4ff
tornado@6.1
6.5.7
1
lsstsqre/sciplat-hub:latest5e0ade6bed1c
tornado@6.1
6.5.7
1
lsstsqre/wfdispatcher:lateste9feb99f524d
tornado@6.1
6.5.7
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
tornado@6.4.2
6.5.7
1
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
tornado@6.1
6.5.7
1
matrixdotorg/synapse:v1.78.0def97fd537d8
tornado@6.1
6.5.7
1
mher/flower:2.051c3c3db5be3
tornado@6.3.3
6.5.7
1
mnaggar3396/python-app:latest371d8ed84b15
tornado@6.2
6.5.7
1
mohameddev006/web-app:v50fbc7360ecf4
tornado@5.1.1
6.5.7
1
octoprint/octoprint:1.4.0106c26efcd8a
tornado@4.5.3
6.5.7
1
octoprint/octoprint:1.6.1ea3bffae2470
tornado@5.1.1
6.5.7
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
tornado@6.5.1
6.5.7
1
opendatacube/explorer:latest120457ffcd69
tornado@6.5.2
6.5.7
1
opendatacube/wps:latest80df355a660b
tornado@6.4.2
6.5.7
1
openzaak/open-notificaties:1.3.02e65313b9b10
tornado@6.1
6.5.7
1
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
tornado@6.1
6.5.7
1
pangeo/base-notebook:2024.01.155fbe688a4f80
tornado@6.3.3
6.5.7
1
roadiehq/community-backstage-image:latestef355bf5b639
tornado@5.1.1
6.5.7
1
robmarkcole/deepstack-ui:latest410275726459
tornado@6.1
6.5.7
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
tornado@6.1
6.5.7
1
sruthitanneru/pi-sample:ui-lateste565ea454ffd
tornado@6.4.2
6.5.7
1
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
tornado@2.4.1
6.5.7
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
tornado@4.5.3
6.5.7
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
tornado@6.5.5
6.5.7
1
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
tornado@6.5.5
6.5.7
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
tornado@4.5.3
6.5.7
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
tornado@6.4.2
6.5.7
1
trungkien210493/icinga2-report:v1.7.12cc8c3763c4c
tornado@5.1.1
6.5.7
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
tornado@6.4
6.5.7
1
ghcr.io/dask/dask:2024.1.0080150de7d86
tornado@6.3.3
6.5.7
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
tornado@6.5.4
6.5.7
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
tornado@6.3.3
6.5.7
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
tornado@6.4.1
6.5.7
1
ghcr.io/esphome/esphome:2026.4.078a82d810709
tornado@6.5.5
6.5.7
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
tornado@6.1
6.5.7
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
tornado@6.3.3
6.5.7
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
tornado@6.5.4
6.5.7
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
tornado@6.4.1
6.5.7
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
tornado@6.5.2
6.5.7
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
tornado@6.5.2
6.5.7
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
tornado@6.5.2
6.5.7
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
tornado@6.3.3
6.5.7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.