StackRadar

CVE-2024-47081

Medium

Advisory

Published 9 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.010
60th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
701
of 17,787 indexed, latest versions
Container images
757
deployed by those charts
Fix available
5 of 5
affected packages

Requests vulnerable to .netrc credentials leak via malicious URLs

Carried by container images the latest versions of 701 of 17,787 indexed charts deploy, on 757 images.

Affected packageAffected versionsFixed inImages
requestspypi2.2.1, 2.6.0, 2.9.1, 2.10.0+25 more2.32.4745
requestsdeb2.2.1-1, 2.2.1-1ubuntu0.3, 2.9.1-3, 2.9.1-3ubuntu0.1+6 more2.2.1-1ubuntu0.4+esm1, 2.9.1-3ubuntu0.1+esm2, 2.18.4-2ubuntu0.1+esm2, 2.22.0-2ubuntu1.1+esm1+1 more62
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8, 2.25.1-7.el9_2+2 more0:2.20.0-6.el8_10, 0:2.25.1-10.el9_643
python-pipdeb22.0.2+dfsg-1, 22.0.2+dfsg-1ubuntu0.2, 22.0.2+dfsg-1ubuntu0.3, 22.0.2+dfsg-1ubuntu0.4+5 more22.0.2+dfsg-1ubuntu0.7, 24.0+dfsg-1ubuntu1.321
py3-requestsapk2.32.3-r02.32.4-r03
OSV records
ALPINE-CVE-2024-47081DEBIAN-CVE-2024-47081GHSA-9hjg-9r4m-mvj7RHSA-2025:12519RHSA-2025:13234UBUNTU-CVE-2024-47081
Also known as
PYSEC-2026-1872, RHSA-2025:15121, RHSA-2025:15122, RHSA-2025:15691, USN-7568-1, USN-7762-1

Charts affected

701 by stars
ChartLatestAffected imagesRadar Score
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47081.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
requests@2.32.3
2.32.4

Open the chart page →

569

Container images carrying it

757 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
assistiot/fl_local_operations_inference:latest0518b63a2e69
requests@2.28.2
2.32.4
1
assistiot/fl_repository:latest0fce3ea719a5
requests@2.28.1
2.32.4
1
assistiot/fl_training_collector:latest792715dd3084
requests@2.26.0
2.32.4
1
assistiot/open_api_backend:1.1.230812ba93555
python-pip@22.0.2+dfsg-1ubuntu0.4
requests@2.31.0
22.0.2+dfsg-1ubuntu0.7
2.32.4
1
assistiot/resource-provisioning_api:1.0.044a37b00d4f8
requests@2.27.1
2.32.4
1
assistiot/resource-provisioning_im:1.0.0a942dc14030a
requests@2.27.1
2.32.4
1
assistiot/resource-provisioning_prc:1.0.08b5d118bdf0e
requests@2.27.1
2.32.4
1
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
requests@2.31.0
2.32.4
1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
requests@2.31.0
2.32.4
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
requests@2.27.1
2.32.4
1
assistiot/traffic-classification_api:2.0.0e32b87786142
requests@2.27.1
2.32.4
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
requests@2.22.0-2ubuntu1
requests@2.22.0
2.22.0-2ubuntu1.1+esm1
2.32.4
1
balihb/pod-pvc-mapping:0.2.4ee48e79f5d76
requests@2.27.1
2.32.4
1
baserow/backend:1.31.1e0b3c8130b91
requests@2.31.0
2.32.4
1
baserow/baserow:1.30.1df0c42eb67e8
requests@2.31.0
2.32.4
1
bbvalabs/sensitive-data:1.0.13ea299ae63c0
requests@2.25.1
2.32.4
1
benbusby/whoogle-search:0.5.4f77f7e6e4ad2
requests@2.25.1
2.32.4
1
billimek/comcastusage-for-influxdb:latest801bba1228ac
requests@2.20.0
2.32.4
1
billimek/prometheus-uptimerobot-exporter:0.0.1f14ccd7aad0e
requests@2.23.0
2.32.4
1
billimek/sb6183-for-influxdb:latestbf8158556035
requests@2.18.4
2.32.4
1
blacktop/httpie:latestfc5e68e2f5ab
requests@2.19.1
2.32.4
1
bmeares/meerschaum:2.8.48e9c5bacaa82
requests@2.32.3
2.32.4
1
bnjbvr/kresus:0.22.137e216b182c8
requests@2.32.3
2.32.4
1
bootc/puppetboard:1.1.0f1383295e7be
requests@2.23.0
2.32.4
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
requests@2.22.0-2ubuntu1
requests@2.22.0
2.22.0-2ubuntu1.1+esm1
2.32.4
1
buildkite/agent:3.25.0aec38cfaae0e
requests@2.20.1
2.32.4
1
buntha/mlflow:2.1.1154542cc3083
requests@2.28.1
2.32.4
1
camerahub/camerahub:0.36.23a5af37dd6e1b
requests@2.29.0
2.32.4
1
camptocamp/bucket-cloner:latestacfafc308d88
requests@2.26.0
2.32.4
1
camptocamp/ekorre:0.1.035c91d5fda04
requests@2.23.0
2.32.4
1
camptocamp/pghoard:10bff736b15623
requests@2.20.0
2.32.4
1
camptocamp/snow-webhook:latest2924b43dbf40
requests@2.21.0
2.32.4
1
cdignam/kodiak:v0.54.05a6a55b39cee
requests@2.28.1
2.32.4
1
ceph/daemon:latest-nautilus90f30824a96e
requests@2.6.0
2.32.4
1
chetangautamm/repo:sipp.v3e7f7049e1544
requests@2.22.0-2ubuntu1
requests@2.22.0
2.22.0-2ubuntu1.1+esm1
2.32.4
1
chubaofs/cfs-client:3.2.015ff74209ce7
requests@2.27.1
2.32.4
1
chubaofs/cfs-server:3.2.0205030e045f2
requests@2.27.1
2.32.4
1
ciuse99/suggestarr:v1.0.20d72768245ef5
requests@2.32.3
2.32.4
1
ckan/ckan-base-datapusher:0.0.2184d11924549f
requests@2.27.1
2.32.4
1
cleveritcz/opencve:1.5.0c75c1636e0b7
requests@2.23.0
2.32.4
1
cloudve/janis-terminal:latestaf56e77ca587
requests@2.23.0
2.32.4
1
cloudve/ttyd:latestd79c1c5881c0
requests@2.23.0
2.32.4
1
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
requests@2.28.2
2.32.4
1
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
requests@2.28.2
2.32.4
1
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
requests@2.28.2
2.32.4
1
codaprotocol/buildkite-exporter:0.2.137c68e67a401
requests@2.25.1
2.32.4
1
codaprotocol/coda-user-agent:0.1.54ba4dd3a041f
requests@2.23.0
2.32.4
1
codecov/self-hosted-api:24.4.10475cb1c3136
requests@2.31.0
2.32.4
1
codecov/self-hosted-worker:24.4.1837f546b479b
requests@2.31.0
2.32.4
1
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
requests@2.25.0
2.32.4
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.