StackRadar

CVE-2022-40897

High

Advisory

Published 23 Dec 2022In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.026
85th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
758
of 17,781 indexed, latest versions
Container images
787
deployed by those charts
Fix available
14 of 14
affected packages

pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)

Carried by container images the latest versions of 758 of 17,781 indexed charts deploy, on 787 images.

Affected packageAffected versionsFixed inImages
setuptoolspypi0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+83 more65.5.1756
python-setuptoolsrpm39.2.0-5.el8, 39.2.0-6.el80:39.2.0-6.el8_7.162
setuptoolsdeb45.2.0-1, 59.6.0-1.245.2.0-1ubuntu0.1, 59.6.0-1.2ubuntu0.22.04.153
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+7 more1.5.4-1ubuntu4+esm2, 8.1.1-2ubuntu0.6+esm3, 9.0.1-2.3~ubuntu1.18.04.6, 20.0.2-5ubuntu1.7+1 more52
python-setuptoolsdeb3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+1 more3.3-1ubuntu2+esm1, 20.7.0-1ubuntu0.1~esm1, 39.0.1-2ubuntu0.1, 44.0.0-2ubuntu0.134
python3x-setuptoolsrpm41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-4.module+el8.5.0+12204+548604230:50.3.2-5.module+el8.8.0+21635+a173a6fa6
python39rpm3.9.16-1.module+el8.8.0+18968+3d7b19f0.10:3.9.16-1.module+el8.8.0+20025+f2100191.25
python-chardetrpm3.0.4-7.el80:3.0.4-19.module+el8.4.0+9822+20bf12493
python-idnarpm2.5-5.el80:2.10-3.module+el8.4.0+9822+20bf12493
python-pysocksrpm1.6.8-3.el80:1.7.1-4.module+el8.4.0+9822+20bf12493
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_80:2.25.0-2.module+el8.4.0+9822+20bf12493
python-urllib3rpm1.24.2-5.el80:1.25.10-4.module+el8.5.0+11712+ea2d2be13
python3x-piprpm19.3.1-6.module+el8.7.0+15823+8950cfa70:20.2.4-7.module+el8.6.0+13003+6bb2c4881
python-plyrpm3.9-9.el80:3.11-10.module+el8.4.0+9822+20bf12491
OSV records
GHSA-r9hx-vwmv-q579RHSA-2023:0835RHSA-2024:4421UBUNTU-CVE-2022-40897
Also known as
BIT-setuptools-2022-40897, PYSEC-2022-43012, RHSA-2023:7395, USN-5817-1

Charts affected

758 by stars
ChartLatestAffected imagesRadar Score
polyglotncsaVerified publisher0.1.12 of 18See more

polyglot ncsa 0.1.1

2 of the 18 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
setuptools@50.3.0
65.5.1
ncsa/checks:1.0.0abf6300b57b7
setuptools@49.2.1
65.5.1

Open the chart page →

55,726
smilencsaVerified publisher1.1.016 of 23See more

smile ncsa 1.1.0

16 of the 23 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
socialmediamacroscope/autophrase:0.1.570fb11d4f531
setuptools@45.2.0
65.5.1
socialmediamacroscope/classification_predict:0.1.24fb86885d64d
setuptools@57.5.0
65.5.1
socialmediamacroscope/classification_split:0.1.24bfda60829fe
setuptools@57.5.0
65.5.1
socialmediamacroscope/classification_train:0.1.207477060bba8
setuptools@57.5.0
65.5.1
socialmediamacroscope/clowder_create_collection:0.1.0c969f7677983
setuptools@57.5.0
65.5.1
socialmediamacroscope/clowder_create_dataset:0.1.09b4211832429
setuptools@57.5.0
65.5.1
socialmediamacroscope/clowder_create_space:0.1.0999f2ff2c128
setuptools@57.5.0
65.5.1
socialmediamacroscope/clowder_list:0.1.051cb17626519
setuptools@57.5.0
65.5.1
socialmediamacroscope/clowder_upload_file:0.1.274e35f64db68
setuptools@57.5.0
65.5.1
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
setuptools@39.0.1
65.5.1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
setuptools@57.5.0
65.5.1
socialmediamacroscope/image_crawler:0.1.2f508216be63c
setuptools@39.0.1
65.5.1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
setuptools@57.5.0
65.5.1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
setuptools@57.5.0
65.5.1
socialmediamacroscope/screen_name_prompt:0.1.2724f3f5702e0
setuptools@57.5.0
65.5.1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
setuptools@57.5.0
65.5.1

Open the chart page →

109,294
neuralbank-stackneuralbank-stack0.1.01 of 4See more

neuralbank-stack neuralbank-stack 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuralbank-frontend:latest5f4572ef6d6f
setuptools@53.0.0
65.5.1

Open the chart page →

5,191
neurofaceneurofaceVerified publisher1.4.22 of 3See more

neuroface neuroface 1.4.2

2 of the 3 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuroface-backend:v1.4.13194d46df0f9
setuptools@53.0.0
65.5.1
quay.io/maximilianopizarro/neuroface-frontend:v1.4.1841b70cd1424
setuptools@53.0.0
65.5.1

Open the chart page →

7,310
nfl-walletnfl-walletVerified publisher0.1.31 of 4See more

nfl-wallet nfl-wallet 0.1.3

1 of the 4 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/nfl-wallet-webapp:1.0.13fead5702be7
setuptools@39.2.0
65.5.1

Open the chart page →

13,041
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
setuptools@45.2.0
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
65.5.1
20.0.2-5ubuntu1.7
45.2.0-1ubuntu0.1

Open the chart page →

22,658
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
python-setuptools@3.3-1ubuntu1
3.3-1ubuntu2+esm1

Open the chart page →

41,427
notification-componentnotification-component1.0.01 of 4See more

notification-component notification-component 1.0.0

1 of the 4 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
setuptools@47.0.0
65.5.1

Open the chart page →

7,527
nfs-server-provisionernovum-rgi-charts1.1.21 of 1See more

nfs-server-provisioner novum-rgi-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
setuptools@40.8.0
65.5.1

Open the chart page →

2,806
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
setuptools@44.0.0
python-pip@9.0.1-2.3~ubuntu1.18.04.1
python-setuptools@39.0.1-2
65.5.1
9.0.1-2.3~ubuntu1.18.04.6
39.0.1-2ubuntu0.1

Open the chart page →

27,633
kuttleokgoloveVerified publisher2.0.01 of 1See more

kuttle okgolove 2.0.0

1 of the 1 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
library/python:3.7-alpinef3d31c8677d0
setuptools@57.5.0
65.5.1

Open the chart page →

797
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
setuptools@59.6.0
65.5.1

Open the chart page →

9,005
apicurioone-acre-fundVerified publisher2.3.03 of 5See more

apicurio one-acre-fund 2.3.0

3 of the 5 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
setuptools@39.2.0
65.5.1
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
setuptools@39.2.0
65.5.1
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
setuptools@39.2.0
65.5.1

Open the chart page →

18,667
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
vespaengine/vespa:8.526.1569b160f58211
setuptools@39.2.0
65.5.1

Open the chart page →

6,338
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
setuptools@41.6.0
python-setuptools@39.2.0-6.el8
65.5.1
0:39.2.0-6.el8_7.1

Open the chart page →

18,023
comacopencord1.0.04 of 9See more

comac opencord 1.0.0

4 of the 9 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
setuptools@40.6.3.post20190116
65.5.1
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
setuptools@39.0.1
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
65.5.1
8.1.1-2ubuntu0.6+esm3
20.7.0-1ubuntu0.1~esm1
omecproject/onos-progran:1.0.05715e5648aa0
python-setuptools@20.7.0-1
20.7.0-1ubuntu0.1~esm1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
setuptools@39.0.1
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
65.5.1
8.1.1-2ubuntu0.6+esm3
20.7.0-1ubuntu0.1~esm1

Open the chart page →

88,546
comac-platformopencord0.0.172 of 11See more

comac-platform opencord 0.0.17

2 of the 11 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
setuptools@40.6.3.post20190116
65.5.1
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
setuptools@39.0.1
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
65.5.1
8.1.1-2ubuntu0.6+esm3
20.7.0-1ubuntu0.1~esm1

Open the chart page →

26,211
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
woojoong/wowza:latestec230db19652
python-setuptools@39.0.1-2
39.0.1-2ubuntu0.1

Open the chart page →

42,614
nem-monitoringopencord1.3.221 of 9See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.20af151f677a63
setuptools@41.0.1
65.5.1

Open the chart page →

4,612
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
omecproject/mme-exporter:paging-latestbcc5f19fd676
setuptools@39.0.1
python-pip@9.0.1-2.3~ubuntu1.18.04.1
python-setuptools@39.0.1-2
65.5.1
9.0.1-2.3~ubuntu1.18.04.6
39.0.1-2ubuntu0.1

Open the chart page →

40,715
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
python-setuptools@20.7.0-1
20.7.0-1ubuntu0.1~esm1

Open the chart page →

38,865
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
setuptools@20.7.0
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
65.5.1
8.1.1-2ubuntu0.6+esm3
20.7.0-1ubuntu0.1~esm1

Open the chart page →

12,609
sebaopencord1.0.04 of 17See more

seba opencord 1.0.0

4 of the 17 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
voltha/voltha-cli:1.6.0c4e41e92f046
setuptools@40.6.2
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
65.5.1
8.1.1-2ubuntu0.6+esm3
20.7.0-1ubuntu0.1~esm1
voltha/voltha-netconf:1.6.037f80524c207
setuptools@20.7.0
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
65.5.1
8.1.1-2ubuntu0.6+esm3
20.7.0-1ubuntu0.1~esm1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
setuptools@20.7.0
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
65.5.1
8.1.1-2ubuntu0.6+esm3
20.7.0-1ubuntu0.1~esm1
voltha/voltha-voltha:1.6.0ff596b62de59
setuptools@40.6.2
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
65.5.1
8.1.1-2ubuntu0.6+esm3
20.7.0-1ubuntu0.1~esm1

Open the chart page →

93,855
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
setuptools@65.5.0
65.5.1

Open the chart page →

10,978
open-pdcopen-pdc0.1.01 of 3See more

open-pdc open-pdc 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
65.5.1

Open the chart page →

3,423
open-pubopen-pub0.1.01 of 3See more

open-pub open-pub 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
65.5.1

Open the chart page →

3,423
akeyless-api-gatewayopenshift1.41.21 of 1See more

akeyless-api-gateway openshift 1.41.2

1 of the 1 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
akeyless/base-rhel:0.0.14ba8900a0061
setuptools@39.2.0
65.5.1

Open the chart page →

11,796
bpjstk-serviceopenshift1.0.01 of 6See more

bpjstk-service openshift 1.0.0

1 of the 6 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
andrianrf/backoffice:latest047a7837651e
setuptools@39.2.0
65.5.1

Open the chart page →

34,671
canvas-oamportalopenshift4.0.01 of 1See more

canvas-oamportal openshift 4.0.0

1 of the 1 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
gurolakman/oam:4.0.0ed8fd2062548
setuptools@39.2.0
65.5.1

Open the chart page →

7,519
chatbot-ai-sampleopenshift0.1.62 of 4See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
quay.io/ai-lab/llamacpp_python:latest70d138997acd
setuptools@53.0.0
65.5.1
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
setuptools@53.0.0
65.5.1

Open the chart page →

18,922
exporteropenshift1.0.473 of 3See more

exporter openshift 1.0.47

3 of the 3 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
public.ecr.aws/perfectscale-io/kube-state-metrics:4.1.14-redhat849e235e2d3e
setuptools@39.2.0
65.5.1
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
setuptools@53.0.0
65.5.1
public.ecr.aws/perfectscale-io/ubi9/ubi:9.5d7c3def9252b
setuptools@53.0.0
65.5.1

Open the chart page →

13,000
flomesh-consoleopenshift0.70.0-30-ubi82 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

2 of the 2 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
65.5.1
0:39.2.0-6.el8_7.1
quay.io/flomesh/pipy-repo-ubi8:0.70.0-469912fdf6c183
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
65.5.1
0:39.2.0-6.el8_7.1

Open the chart page →

9,968
fsmopenshift0.1.8-ubi.61 of 6See more

fsm openshift 0.1.8-ubi.6

1 of the 6 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
quay.io/flomesh/pipy-ubi8:0.50.0-8824352dca6672
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
65.5.1
0:39.2.0-6.el8_7.1

Open the chart page →

16,556
hamiopenshift2.10.0-r0-openshift.c4e22e881 of 2See more

hami openshift 2.10.0-r0-openshift.c4e22e88

1 of the 2 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
ghcr.io/dynamia-ai/hami-enterprise:v2.10.0-r0-openshift.c4e22e88745504757300
setuptools@39.2.0
65.5.1

Open the chart page →

4,749
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
setuptools@53.0.0
65.5.1

Open the chart page →

4,127
kite-agentopenshift1.0.01 of 1See more

kite-agent openshift 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
quay.io/fengyuanxing/zte_endogenous_security/kite-agent:V2.0.0734808044936
setuptools@39.2.0
65.5.1

Open the chart page →

5,863
orion-ldopenshift1.0.32 of 2See more

orion-ld openshift 1.0.3

2 of the 2 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
quay.io/fiware/orion-ld:1.0.1ea838e5b4051
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
65.5.1
0:39.2.0-6.el8_7.1
quay.io/opencloudio/ibm-mongodb:4.0.24d8c631a6dc43
setuptools@39.0.1
65.5.1

Open the chart page →

14,727
osm-edgeopenshift1.2.1-ubi81 of 7See more

osm-edge openshift 1.2.1-ubi8

1 of the 7 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
quay.io/flomesh/pipy-ubi8:0.70.0-4635d87a381432
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
65.5.1
0:39.2.0-6.el8_7.1

Open the chart page →

19,455
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
setuptools@53.0.0
65.5.1

Open the chart page →

8,599
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
setuptools@39.2.0
65.5.1

Open the chart page →

13,607
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
setuptools@39.2.0
65.5.1

Open the chart page →

11,738
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
setuptools@39.2.0
65.5.1

Open the chart page →

13,568
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
setuptools@39.2.0
65.5.1

Open the chart page →

13,551
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
setuptools@39.2.0
65.5.1

Open the chart page →

13,455
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
setuptools@39.2.0
65.5.1

Open the chart page →

13,100
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
python-setuptools@39.0.1-2
39.0.1-2ubuntu0.1

Open the chart page →

15,592
open-webconceptopen-webconcept0.1.01 of 3See more

open-webconcept open-webconcept 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
65.5.1

Open the chart page →

3,423
openwhiskopenwhisk1.0.02 of 10See more

openwhisk openwhisk 1.0.0

2 of the 10 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
openwhisk/kafkaprovider:2.1.063dc3d2a0904
setuptools@41.4.0
65.5.1
openwhisk/ow-utils:1.0.0c80dba0de3aa
setuptools@44.1.1
python-pip@9.0.1-2.3~ubuntu1.18.04.4
python-setuptools@39.0.1-2
65.5.1
9.0.1-2.3~ubuntu1.18.04.6
39.0.1-2ubuntu0.1

Open the chart page →

36,215
arpap2p-avs0.1.31 of 2See more

arpa p2p-avs 0.1.3

1 of the 2 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
setuptools@59.4.0
65.5.1

Open the chart page →

1,980
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-40897.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
65.5.1
0:39.2.0-6.el8_7.1

Open the chart page →

27,537

Container images carrying it

787 by charts deploying them

A fixed version is listed for 14 of the 14 affected packages.

Container imageDigestPackageFixed inUsed by
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
setuptools@51.3.3
65.5.1
2
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
setuptools@40.6.3.post20190116
65.5.1
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
setuptools@39.0.1
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
65.5.1
8.1.1-2ubuntu0.6+esm3
20.7.0-1ubuntu0.1~esm1
2
pypiserver/pypiserver:v1.3.2303ac89b2aa2
setuptools@44.0.0
65.5.1
2
sealife/fritzbox-exporter:1.0f5cc2f0f4c9b
setuptools@51.0.0
65.5.1
2
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
setuptools@45.2.0
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
65.5.1
20.0.2-5ubuntu1.7
45.2.0-1ubuntu0.1
2
stakater/stakater-nordmart-review:1.0.35954d2be66e95
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
65.5.1
0:39.2.0-6.el8_7.1
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
setuptools@45.2.0
65.5.1
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
setuptools@59.6.0
65.5.1
2
weblate/weblate:4.2.2-169c160d37a3c
setuptools@40.8.0
65.5.1
2
wurstmeister/zookeeper:latest7a7fd44a7210
python-setuptools@3.3-1ubuntu1
3.3-1ubuntu2+esm1
2
gcr.io/k8s-staging-sig-storage/nfs-provisioner:v3.0.02de1d15fc1f2
setuptools@40.8.0
65.5.1
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
setuptools@59.6.0-1.2
59.6.0-1.2ubuntu0.22.04.1
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
python-setuptools@39.0.1-2
39.0.1-2ubuntu0.1
2
ghcr.io/miguelndecarvalho/speedtest-exporter:v3.5.4f1064d49124c
setuptools@65.5.0
65.5.1
2
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
setuptools@39.2.0
65.5.1
2
quay.io/keycloak/keycloak:20.0054ef67eb7da
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
65.5.1
0:39.2.0-6.el8_7.1
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
65.5.1
0:39.2.0-6.el8_7.1
2
quay.io/kiwigrid/k8s-sidecar:1.19.26a8671702d6f
setuptools@58.1.0
65.5.1
2
quay.io/opencloudio/ibm-mongodb:4.0.24d8c631a6dc43
setuptools@39.0.1
65.5.1
2
quay.io/openshift/origin-cli:4.7464a3af4dfe0
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
65.5.1
0:39.2.0-6.el8_7.1
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
65.5.1
0:39.2.0-6.el8_7.1
2
quay.io/strimzi/operator:0.39.002f6f143fc6d
setuptools@39.2.0
65.5.1
2
a10networks/acos-prometheus-exporter:latest8dc58d434d71
setuptools@39.0.1
python-pip@9.0.1-2.3~ubuntu1.18.04.1
python-setuptools@39.0.1-2
65.5.1
9.0.1-2.3~ubuntu1.18.04.6
39.0.1-2ubuntu0.1
1
acockburn/appdaemon:4.0.83a93281d7e94
setuptools@54.2.0
65.5.1
1
adferrand/backuppc:4.4.06fea97b02758
setuptools@47.0.0
65.5.1
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
setuptools@45.2.0-1
45.2.0-1ubuntu0.1
1
afrank/mozalert-controller:latestd463c37b08d7
setuptools@49.2.0
65.5.1
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
setuptools@45.2.0-1
45.2.0-1ubuntu0.1
1
ajanvier/polr:2.3.091ac61b88c85
setuptools@51.3.3
65.5.1
1
akeyless/base-rhel:0.0.14ba8900a0061
setuptools@39.2.0
65.5.1
1
alaaamin/reload-count-tornado-py-app:v1.0.1alpine46da5844794e
setuptools@58.1.0
65.5.1
1
alerta/alerta-web:8.5.04786b9eaa606
setuptools@58.5.3
65.5.1
1
alexeyr7/sf-test-app:latestdf0b41fdbd53
setuptools@58.1.0
65.5.1
1
alfresco/alfresco-activemq:5.18.7-jre17-rockylinux85472f88d9b0b
setuptools@39.2.0
65.5.1
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
setuptools@39.0.1
python-pip@9.0.1-2.3~ubuntu1.18.04.5
python-setuptools@39.0.1-2
65.5.1
9.0.1-2.3~ubuntu1.18.04.6
39.0.1-2ubuntu0.1
1
alpine/k8s:1.22.600ac10bcb759
setuptools@57.4.0
65.5.1
1
alpine/k8s:1.27.321b24e6bf801
setuptools@65.5.0
65.5.1
1
alpine/k8s:1.18.16a41efe02a041
setuptools@56.0.0
65.5.1
1
alpine/k8s:1.28.2fc059f056ad0
setuptools@65.5.0
65.5.1
1
amagdi888/my-repo:hello-appd8a10fc8faf6
setuptools@58.1.0
65.5.1
1
amancevice/superset:0.28.1c8c04bfe3d66
setuptools@40.8.0
65.5.1
1
amazon/opendistro-for-elasticsearch:1.4.06df71eb04639
setuptools@0.9.8
65.5.1
1
amd64/mysql:5.7e20a653e0f51
setuptools@58.1.0
65.5.1
1
amundsendev/amundsen-frontend:2.1.169e7915e61c1
setuptools@46.1.3
65.5.1
1
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
setuptools@49.6.0
65.5.1
1
amundsendev/amundsen-search:2.4.099dda9502c3e
setuptools@49.6.0
65.5.1
1
anchore/anchore-engine:v0.10.0bde9eedf639d
setuptools@41.6.0
python-setuptools@39.2.0-6.el8
65.5.1
0:39.2.0-6.el8_7.1
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
setuptools@39.2.0
python-setuptools@39.2.0-5.el8
65.5.1
0:39.2.0-6.el8_7.1
1
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
setuptools@59.6.0
65.5.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.