StackRadar

CVE-2024-47081

Medium

Advisory

Published 9 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.010
60th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
701
of 17,787 indexed, latest versions
Container images
757
deployed by those charts
Fix available
5 of 5
affected packages

Requests vulnerable to .netrc credentials leak via malicious URLs

Carried by container images the latest versions of 701 of 17,787 indexed charts deploy, on 757 images.

Affected packageAffected versionsFixed inImages
requestspypi2.2.1, 2.6.0, 2.9.1, 2.10.0+25 more2.32.4745
requestsdeb2.2.1-1, 2.2.1-1ubuntu0.3, 2.9.1-3, 2.9.1-3ubuntu0.1+6 more2.2.1-1ubuntu0.4+esm1, 2.9.1-3ubuntu0.1+esm2, 2.18.4-2ubuntu0.1+esm2, 2.22.0-2ubuntu1.1+esm1+1 more62
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8, 2.25.1-7.el9_2+2 more0:2.20.0-6.el8_10, 0:2.25.1-10.el9_643
python-pipdeb22.0.2+dfsg-1, 22.0.2+dfsg-1ubuntu0.2, 22.0.2+dfsg-1ubuntu0.3, 22.0.2+dfsg-1ubuntu0.4+5 more22.0.2+dfsg-1ubuntu0.7, 24.0+dfsg-1ubuntu1.321
py3-requestsapk2.32.3-r02.32.4-r03
OSV records
ALPINE-CVE-2024-47081DEBIAN-CVE-2024-47081GHSA-9hjg-9r4m-mvj7RHSA-2025:12519RHSA-2025:13234UBUNTU-CVE-2024-47081
Also known as
PYSEC-2026-1872, RHSA-2025:15121, RHSA-2025:15122, RHSA-2025:15691, USN-7568-1, USN-7762-1

Charts affected

701 by stars
ChartLatestAffected imagesRadar Score
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47081.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
requests@2.32.3
2.32.4

Open the chart page →

569

Container images carrying it

757 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
sirrend/helmup-engine:0.1.13699e79e3d4e2
requests@2.31.0
2.32.4
1
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
requests@2.31.0
2.32.4
1
sirrend/helmup-notifications-service:0.1.3997866417011
requests@2.31.0
2.32.4
1
sissbruecker/linkding:1.35.00c5dddf0b37c
requests@2.32.3
2.32.4
1
skylenet/ethereum-genesis-generator:latest210353ce7c89
requests@2.28.1
2.32.4
1
smarketshq/marge-bot:0.9.2cfc765b27e64
requests@2.21.0
2.32.4
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
requests@2.31.0
2.32.4
1
socialmediamacroscope/classification_predict:0.1.24fb86885d64d
requests@2.29.0
2.32.4
1
socialmediamacroscope/classification_split:0.1.24bfda60829fe
requests@2.29.0
2.32.4
1
socialmediamacroscope/classification_train:0.1.207477060bba8
requests@2.29.0
2.32.4
1
socialmediamacroscope/clowder_create_collection:0.1.0c969f7677983
requests@2.29.0
2.32.4
1
socialmediamacroscope/clowder_create_dataset:0.1.09b4211832429
requests@2.29.0
2.32.4
1
socialmediamacroscope/clowder_create_space:0.1.0999f2ff2c128
requests@2.29.0
2.32.4
1
socialmediamacroscope/clowder_list:0.1.051cb17626519
requests@2.30.0
2.32.4
1
socialmediamacroscope/clowder_upload_file:0.1.274e35f64db68
requests@2.31.0
2.32.4
1
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
requests@2.21.0
2.32.4
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
requests@2.31.0
2.32.4
1
socialmediamacroscope/image_crawler:0.1.2f508216be63c
requests@2.21.0
2.32.4
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
requests@2.31.0
2.32.4
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
requests@2.31.0
2.32.4
1
socialmediamacroscope/screen_name_prompt:0.1.2724f3f5702e0
requests@2.29.0
2.32.4
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
requests@2.31.0
2.32.4
1
softonic/gar-exporter:0.2.1a64d6c0e0ae5
requests@2.24.0
2.32.4
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
requests@2.22.0-2ubuntu1
requests@2.22.0
2.22.0-2ubuntu1.1+esm1
2.32.4
1
sonatype/nexus:oss6bc88b51d4d7
requests@2.6.0
2.32.4
1
splunk/splunk-operator:2.0.0c4e0d3146226
python-requests@2.20.0-2.1.el8_1
requests@2.20.0
0:2.20.0-6.el8_10
2.32.4
1
sruthitanneru/pi-sample:ui-lateste565ea454ffd
requests@2.32.3
2.32.4
1
sslhep/servicex-did-finder:v1.8.5ab0090083567
requests@2.25.1
2.32.4
1
sslhep/x509-secrets:v1.8.5d9e9ecb12d59
requests@2.25.1
2.32.4
1
stackstorm/st2actionrunner:3.888235ba70cad
requests@2.22.0-2ubuntu1.1
requests@2.22.0
2.22.0-2ubuntu1.1+esm1
2.32.4
1
stackstorm/st2api:3.86f56d239d280
requests@2.22.0-2ubuntu1.1
requests@2.25.1
2.22.0-2ubuntu1.1+esm1
2.32.4
1
stackstorm/st2auth:3.833ecfda16608
requests@2.22.0-2ubuntu1.1
requests@2.22.0
2.22.0-2ubuntu1.1+esm1
2.32.4
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
requests@2.22.0-2ubuntu1.1
requests@2.25.1
2.22.0-2ubuntu1.1+esm1
2.32.4
1
stackstorm/st2notifier:3.8f190a6212195
requests@2.22.0-2ubuntu1.1
requests@2.22.0
2.22.0-2ubuntu1.1+esm1
2.32.4
1
stackstorm/st2rulesengine:3.8259503496ff9
requests@2.22.0-2ubuntu1.1
requests@2.25.1
2.22.0-2ubuntu1.1+esm1
2.32.4
1
stackstorm/st2scheduler:3.8b1de2055c362
requests@2.22.0-2ubuntu1.1
requests@2.22.0
2.22.0-2ubuntu1.1+esm1
2.32.4
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
requests@2.22.0-2ubuntu1.1
requests@2.25.1
2.22.0-2ubuntu1.1+esm1
2.32.4
1
stackstorm/st2stream:3.81c8904a3bf67
requests@2.22.0-2ubuntu1.1
requests@2.22.0
2.22.0-2ubuntu1.1+esm1
2.32.4
1
stackstorm/st2timersengine:3.81bf35bfaf00c
requests@2.22.0-2ubuntu1.1
requests@2.22.0
2.22.0-2ubuntu1.1+esm1
2.32.4
1
stackstorm/st2workflowengine:3.819fdfffdbba8
requests@2.22.0-2ubuntu1.1
requests@2.25.1
2.22.0-2ubuntu1.1+esm1
2.32.4
1
stakewiselabs/bls-horcrux:v1.0.02afd0c0b34cb
requests@2.25.1
2.32.4
1
stashapp/stash:latest24dbd7607174
requests@2.22.0-2ubuntu1
requests@2.22.0
2.22.0-2ubuntu1.1+esm1
2.32.4
1
statcan/ckan:2.93921305425b8
requests@2.22.0
2.32.4
1
substratusai/verba:v0.4.0-baseURL261695be635eb
requests@2.31.0
2.32.4
1
svtechnmaa/svtech_icinga2:v1.1.667be2aba9436
requests@2.27.1
2.32.4
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
requests@2.22.0-2ubuntu1.1
requests@2.27.1
2.22.0-2ubuntu1.1+esm1
2.32.4
1
svtechnmaa/svtech_rundeck_option_provider:v1.1.1674fad30a51f
requests@2.27.1
2.32.4
1
swisscomcloud/esc-vm-scheduler-web:latestb6639d1a922e
requests@2.28.1
2.32.4
1
t3nde/gtmetrix-bq:0.2.0d2939e9a719b
requests@2.23.0
2.32.4
1
tachyongroup/mlflow-deployment-controller:mlflow-controller-0.1.87e79b9000856
requests@2.28.2
2.32.4
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.