StackRadar

CVE-2024-47081

Medium

Advisory

Published 9 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.010
60th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
701
of 17,787 indexed, latest versions
Container images
757
deployed by those charts
Fix available
5 of 5
affected packages

Requests vulnerable to .netrc credentials leak via malicious URLs

Carried by container images the latest versions of 701 of 17,787 indexed charts deploy, on 757 images.

Affected packageAffected versionsFixed inImages
requestspypi2.2.1, 2.6.0, 2.9.1, 2.10.0+25 more2.32.4745
requestsdeb2.2.1-1, 2.2.1-1ubuntu0.3, 2.9.1-3, 2.9.1-3ubuntu0.1+6 more2.2.1-1ubuntu0.4+esm1, 2.9.1-3ubuntu0.1+esm2, 2.18.4-2ubuntu0.1+esm2, 2.22.0-2ubuntu1.1+esm1+1 more62
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8, 2.25.1-7.el9_2+2 more0:2.20.0-6.el8_10, 0:2.25.1-10.el9_643
python-pipdeb22.0.2+dfsg-1, 22.0.2+dfsg-1ubuntu0.2, 22.0.2+dfsg-1ubuntu0.3, 22.0.2+dfsg-1ubuntu0.4+5 more22.0.2+dfsg-1ubuntu0.7, 24.0+dfsg-1ubuntu1.321
py3-requestsapk2.32.3-r02.32.4-r03
OSV records
ALPINE-CVE-2024-47081DEBIAN-CVE-2024-47081GHSA-9hjg-9r4m-mvj7RHSA-2025:12519RHSA-2025:13234UBUNTU-CVE-2024-47081
Also known as
PYSEC-2026-1872, RHSA-2025:15121, RHSA-2025:15122, RHSA-2025:15691, USN-7568-1, USN-7762-1

Charts affected

701 by stars
ChartLatestAffected imagesRadar Score
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47081.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
requests@2.32.3
2.32.4

Open the chart page →

569

Container images carrying it

757 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
requests@2.25.1
2.32.4
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
requests@2.25.1
2.32.4
1
openvpn/openvpn-as:latest2253c10ec652
requests@2.31.0
2.32.4
1
openwhisk/kafkaprovider:2.1.063dc3d2a0904
requests@2.10.0
2.32.4
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
requests@2.24.0
2.32.4
1
openzaak/open-notificaties:1.3.02e65313b9b10
requests@2.27.1
2.32.4
1
openzaak/open-zaak:1.6.02ca2ea6e0ae9
requests@2.27.1
2.32.4
1
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
requests@2.26.0
2.32.4
1
pangeo/base-notebook:2024.01.155fbe688a4f80
requests@2.31.0
2.32.4
1
pecan/monitor:1.7.273b2074f3fec
requests@2.21.0
2.32.4
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
requests@2.32.3
2.32.4
1
phntom/email-manager:0.1.22d8e2a9f2f085
requests@2.28.2
2.32.4
1
phntom/external-dns-host-network:0.0.123adadbac8443
requests@2.28.1
2.32.4
1
phntom/stocks-nasdaq-crawler:0.0.28d2b844700b57
requests@2.24.0
2.32.4
1
phsmith/rundeck-exporter:2.6.10265a7616ae8
requests@2.31.0
2.32.4
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
requests@2.23.0
2.32.4
1
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
python-requests@2.20.0-3.el8_8
requests@2.31.0
0:2.20.0-6.el8_10
2.32.4
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
requests@2.32.3
2.32.4
1
prompve/prometheus-pve-exporter:3.4.2fcf041f0c24d
requests@2.32.0
2.32.4
1
prompve/prometheus-pve-exporter:2.0.1ff6749eb03b0
requests@2.23.0
2.32.4
1
pryorda/vmware_exporter:v0.18.479925e63e59f
requests@2.28.1
2.32.4
1
pryorda/vmware_exporter:v0.18.3e0f5ba8b7856
requests@2.27.1
2.32.4
1
pschiffe/pdns-admin:0.4.137ebba8c2b8f
requests@2.28.2
2.32.4
1
psono/psono-server:5.0.03b974b43ea03
requests@2.32.3
2.32.4
1
rdavidoff/twitch-channel-points-miner-v2:1.8.67ae4c5135771
requests@2.31.0
2.32.4
1
redash/redash:25.8.000d813437db5
requests@2.32.3
2.32.4
1
redash/redash:10.0.0.b503639392753c0376
requests@2.21.0
2.32.4
1
redash/redash:26.3.0c5c9148f5c38
requests@2.32.3
2.32.4
1
redislabs/redisearch:2.4.1433561794c5c8
requests@2.28.1
2.32.4
1
redislabs/redisinsight:1.14.0b03ab1426d0d
requests@2.28.0
2.32.4
1
reportportal/service-auto-analyzer:5.7.295ada4a216ce
requests@2.22.0
2.32.4
1
reportportal/service-metrics-gatherer:1.1.202a0e6dc11161
requests@2.22.0
2.32.4
1
rezachalak/bzen-mongo:1.0.034f694325191
requests@2.31.0
2.32.4
1
roadiehq/community-backstage-image:latestef355bf5b639
requests@2.26.0
2.32.4
1
robmarkcole/deepstack-ui:latest410275726459
requests@2.26.0
2.32.4
1
robotshop/rs-payment:latest774b52c6180d
requests@2.26.0
2.32.4
1
rook/ceph:v1.20.72f970c425617
requests@2.25.1
2.32.4
1
rook/ceph:v1.19.2944a1dd70496
requests@2.25.1
2.32.4
1
saidsef/scapy-containerised:v2025.02f17f7c435891
requests@2.32.3
2.32.4
1
saltstack/salt:3006.3e9c7906b7a5c
requests@2.31.0
2.32.4
1
santisbon/evwatcher:latestc4e994ca4540
requests@2.31.0
2.32.4
1
seafileltd/seafile-mc:9.0.106693911bcc40
requests@2.22.0-2ubuntu1
requests@2.22.0
2.22.0-2ubuntu1.1+esm1
2.32.4
1
seafileltd/seafile-mc:10.0.170628f29c663
requests@2.22.0-2ubuntu1.1
requests@2.22.0
2.22.0-2ubuntu1.1+esm1
2.32.4
1
seafileltd/seafile-mc:9.0.97ac833196f60
requests@2.22.0-2ubuntu1
requests@2.22.0
2.22.0-2ubuntu1.1+esm1
2.32.4
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
python-pip@22.0.2+dfsg-1ubuntu0.4
requests@2.31.0
22.0.2+dfsg-1ubuntu0.7
2.32.4
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
requests@2.22.0-2ubuntu1
requests@2.22.0
2.22.0-2ubuntu1.1+esm1
2.32.4
1
searx/searx:1.0.0-211-968b28993dbb3a6d9419
requests@2.23.0
2.32.4
1
seldonio/locust-core:0.81d0da98a2d76
requests@2.22.0
2.32.4
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
python-requests@2.20.0-2.1.el8_1
requests@2.26.0
0:2.20.0-6.el8_10
2.32.4
1
shaowenchen/ops-server:latest315444f703f4
python-pip@22.0.2+dfsg-1ubuntu0.6
22.0.2+dfsg-1ubuntu0.7
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.