CVE-2024-47081

Medium

Advisory

Published 9 Jun 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.010; 60th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 701; of 17,787 indexed, latest versions
Container images: 757; deployed by those charts
Fix available: 5 of 5; affected packages

Requests vulnerable to .netrc credentials leak via malicious URLs

Carried by container images the latest versions of 701 of 17,787 indexed charts deploy, on 757 images.

Affected package	Affected versions	Fixed in	Images
requestspypi	2.2.1, 2.6.0, 2.9.1, 2.10.0+25 more	2.32.4	745
requestsdeb	2.2.1-1, 2.2.1-1ubuntu0.3, 2.9.1-3, 2.9.1-3ubuntu0.1+6 more	2.2.1-1ubuntu0.4+esm1, 2.9.1-3ubuntu0.1+esm2, 2.18.4-2ubuntu0.1+esm2, 2.22.0-2ubuntu1.1+esm1+1 more	62
python-requestsrpm	2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8, 2.25.1-7.el9_2+2 more	0:2.20.0-6.el8_10, 0:2.25.1-10.el9_6	43
python-pipdeb	22.0.2+dfsg-1, 22.0.2+dfsg-1ubuntu0.2, 22.0.2+dfsg-1ubuntu0.3, 22.0.2+dfsg-1ubuntu0.4+5 more	22.0.2+dfsg-1ubuntu0.7, 24.0+dfsg-1ubuntu1.3	21
py3-requestsapk	2.32.3-r0	2.32.4-r0	3

OSV records: ALPINE-CVE-2024-47081 DEBIAN-CVE-2024-47081 GHSA-9hjg-9r4m-mvj7 RHSA-2025:12519 RHSA-2025:13234 UBUNTU-CVE-2024-47081
Also known as: PYSEC-2026-1872, RHSA-2025:15121, RHSA-2025:15122, RHSA-2025:15691, USN-7568-1, USN-7762-1

Charts affected

701 by stars

Chart

Latest

Affected images

Radar Score

zerossl-cert-managerzerossl-cert-manager

0.1.0

1 of 2 See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47081.

Container image	Digest	Package	Fixed in
andreymileshin/zerossl-issuer :v1.0.0	e0825acc9e48	requests@2.32.3	2.32.4

Open the chart page →

569

Container images carrying it

757 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	requests@2.20.0	2.32.4	2
quay.io/kiwigrid/k8s-sidecar :1.19.2	6a8671702d6f	requests@2.28.0	2.32.4	2
quay.io/kiwigrid/k8s-sidecar :1.26.1	b8d5067137fe	requests@2.31.0	2.32.4	2
quay.io/kiwigrid/k8s-sidecar :1.27.4	f6ed71d0f9f1	requests@2.32.3	2.32.4	2
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	python-requests@2.20.0-2.1.el8_1 requests@2.20.0	0:2.20.0-6.el8_10 2.32.4	2
quay.io/openshift/origin-cli :4.8	bb5e052770e5	python-requests@2.20.0-2.1.el8_1 requests@2.20.0	0:2.20.0-6.el8_10 2.32.4	2
a10networks/acos-prometheus-exporter :latest	8dc58d434d71	requests@2.23.0	2.32.4	1
acockburn/appdaemon :4.0.8	3a93281d7e94	requests@2.25.1	2.32.4	1
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	requests@2.22.0-2ubuntu1 requests@2.22.0	2.22.0-2ubuntu1.1+esm1 2.32.4	1
afrank/mozalert-controller :latest	d463c37b08d7	requests@2.24.0	2.32.4	1
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	requests@2.22.0-2ubuntu1 requests@2.22.0	2.22.0-2ubuntu1.1+esm1 2.32.4	1
akeyless/base-rhel :0.0.1	4ba8900a0061	python-requests@2.20.0-3.el8_8 requests@2.31.0	0:2.20.0-6.el8_10 2.32.4	1
alerta/alerta-web :8.5.0	4786b9eaa606	requests@2.25.1	2.32.4	1
alexvm6/generator :latest	fb99ee4f760a	requests@2.31.0	2.32.4	1
allegroai/clearml :2.0.0-613	713ae38f7daf	requests@2.31.0	2.32.4	1
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	requests@2.25.1	2.32.4	1
allegroai/clearml-serving-inference :1.3.0	fca885e8cfc6	requests@2.28.2	2.32.4	1
allegroai/clearml-serving-statistics :1.3.0	c58d9da7bdf8	requests@2.25.1	2.32.4	1
amancevice/superset :0.28.1	c8c04bfe3d66	requests@2.18.4	2.32.4	1
amundsendev/amundsen-frontend :2.1.1	69e7915e61c1	requests@2.20.0	2.32.4	1
amundsendev/amundsen-metadata :2.5.4	4d98eb21f5f9	requests@2.24.0	2.32.4	1
amundsendev/amundsen-search :2.4.0	99dda9502c3e	requests@2.24.0	2.32.4	1
anchore/anchore-engine :v0.10.0	bde9eedf639d	python-requests@2.20.0-2.1.el8_1 requests@2.20.0	0:2.20.0-6.el8_10 2.32.4	1
anchore/anchore-engine :v0.7.1	ed9b3badd17c	requests@2.23.0	2.32.4	1
andrewgolikov55/intel-gpu-exporter :latest	fcc001b61c0e	python-pip@22.0.2+dfsg-1ubuntu0.3	22.0.2+dfsg-1ubuntu0.7	1
andreymileshin/kube-info :v0.1.0	f7b300bc9e66	requests@2.32.3	2.32.4	1
andreymileshin/zerossl-issuer :v1.0.0	e0825acc9e48	requests@2.32.3	2.32.4	1
andrianrf/backoffice :latest	047a7837651e	python-requests@2.20.0-3.el8_8 requests@2.20.0	0:2.20.0-6.el8_10 2.32.4	1
apache/airflow :2.8.4-python3.9	64e58748b6b9	requests@2.31.0	2.32.4	1
apache/airflow :2.10.2-python3.9	ce90bdc3d2af	requests@2.32.3	2.32.4	1
apache/airflow :2.8.1	e5560ad0b86e	requests@2.31.0	2.32.4	1
apache/couchdb :2.3	9f895c8ae371	requests@2.12.4	2.32.4	1
apachepulsar/pulsar :3.1.0	16f9fdab3fa6	python-pip@22.0.2+dfsg-1ubuntu0.3	22.0.2+dfsg-1ubuntu0.7	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	requests@2.27.1	2.32.4	1
apachepulsar/pulsar :2.6.1	4db6ff0b4045	requests@2.24.0	2.32.4	1
apachepulsar/pulsar :3.0.7	9c9947de139d	python-pip@22.0.2+dfsg-1ubuntu0.4	22.0.2+dfsg-1ubuntu0.7	1
apachepulsar/pulsar :2.9.0	d056c89b7131	requests@2.26.0	2.32.4	1
apachepulsar/pulsar :2.8.2	d538416d5afe	requests@2.26.0	2.32.4	1
apache/ranger :2.7.0	76c176e8a0e4	python-pip@22.0.2+dfsg-1ubuntu0.6	22.0.2+dfsg-1ubuntu0.7	1
apache/superset :9cdaa280429ec297db16d56c94fd77b5d2aff107	975ab033580d	requests@2.26.0	2.32.4	1
apache/superset :4.0.1	ab9467fd712c	requests@2.31.0	2.32.4	1
apecloud/aperag :v0.0.0-nightly	8ac9947a2c84	requests@2.32.3	2.32.4	1
apecloud/kb-cloud-installer :v2.1.42-certified	98abc64aa985	requests@2.25.1	2.32.4	1
apecloud/smartfs-csi-driver :0.1.1	ff2858eab9cc	python-requests@2.20.0-3.el8_8 requests@2.20.0	0:2.20.0-6.el8_10 2.32.4	1
aquasec/kube-hunter :195	0bf607ce9308	requests@2.20.1	2.32.4	1
aristidetm/basic-notebook :3.6.5	469dbc951224	requests@2.32.3	2.32.4	1
aristidetm/k8s-hub :3.3.7	ccb516cb8474	requests@2.31.0	2.32.4	1
arthurjguerra18/revwallet :v0.7.12	f540af20b307	requests@2.32.3	2.32.4	1
arunvelsriram/utils :latest	655ad18fd8d6	python-pip@24.0+dfsg-1ubuntu1.2 requests@2.31.0	24.0+dfsg-1ubuntu1.3 2.32.4	1
assistiot/cybersecurity-monitoring_id-wzh :latest	0aacefac9677	requests@2.25.1	2.32.4	1