CVE-2024-47081

Medium

Advisory

Published 9 Jun 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.010; 60th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 701; of 17,787 indexed, latest versions
Container images: 757; deployed by those charts
Fix available: 5 of 5; affected packages

Requests vulnerable to .netrc credentials leak via malicious URLs

Carried by container images the latest versions of 701 of 17,787 indexed charts deploy, on 757 images.

Affected package	Affected versions	Fixed in	Images
requestspypi	2.2.1, 2.6.0, 2.9.1, 2.10.0+25 more	2.32.4	745
requestsdeb	2.2.1-1, 2.2.1-1ubuntu0.3, 2.9.1-3, 2.9.1-3ubuntu0.1+6 more	2.2.1-1ubuntu0.4+esm1, 2.9.1-3ubuntu0.1+esm2, 2.18.4-2ubuntu0.1+esm2, 2.22.0-2ubuntu1.1+esm1+1 more	62
python-requestsrpm	2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8, 2.25.1-7.el9_2+2 more	0:2.20.0-6.el8_10, 0:2.25.1-10.el9_6	43
python-pipdeb	22.0.2+dfsg-1, 22.0.2+dfsg-1ubuntu0.2, 22.0.2+dfsg-1ubuntu0.3, 22.0.2+dfsg-1ubuntu0.4+5 more	22.0.2+dfsg-1ubuntu0.7, 24.0+dfsg-1ubuntu1.3	21
py3-requestsapk	2.32.3-r0	2.32.4-r0	3

OSV records: ALPINE-CVE-2024-47081 DEBIAN-CVE-2024-47081 GHSA-9hjg-9r4m-mvj7 RHSA-2025:12519 RHSA-2025:13234 UBUNTU-CVE-2024-47081
Also known as: PYSEC-2026-1872, RHSA-2025:15121, RHSA-2025:15122, RHSA-2025:15691, USN-7568-1, USN-7762-1

Charts affected

701 by stars

Chart

Latest

Affected images

Radar Score

zerossl-cert-managerzerossl-cert-manager

0.1.0

1 of 2 See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47081.

Container image	Digest	Package	Fixed in
andreymileshin/zerossl-issuer :v1.0.0	e0825acc9e48	requests@2.32.3	2.32.4

Open the chart page →

569

Container images carrying it

757 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
confluentinc/cp-enterprise-kafka :6.1.0	8f1544df1f48	requests@2.25.0	2.32.4	1
confluentinc/cp-kafka :5.4.0	1bbda887bc53	requests@2.11.1	2.32.4	1
confluentinc/cp-kafka :7.1.2.amd64	3bf359d5e340	requests@2.27.1	2.32.4	1
confluentinc/cp-kafka :7.6.6	83dbca3efd2a	requests@2.32.3	2.32.4	1
confluentinc/cp-kafka :7.8.0-3-ubi8	adc392d28a1e	requests@2.32.3	2.32.4	1
confluentinc/cp-kafka :7.4.4	c0224a1adf7a	requests@2.31.0	2.32.4	1
confluentinc/cp-kafka :5.0.1	c87b1c07fb53	requests@2.11.1	2.32.4	1
confluentinc/cp-kafka :7.5.1	dc9b972db002	requests@2.31.0	2.32.4	1
confluentinc/cp-kafka-connect :6.1.0	4bc70a83ca6f	requests@2.25.0	2.32.4	1
confluentinc/cp-kafka-rest :6.1.0	b0b7aa26254a	requests@2.25.0	2.32.4	1
confluentinc/cp-ksqldb-server :7.6.0	8ec46c27982f	requests@2.31.0	2.32.4	1
confluentinc/cp-ksqldb-server :6.1.0	ee403d5b9090	requests@2.25.0	2.32.4	1
confluentinc/cp-schema-registry :6.1.0	b651d4b6185a	requests@2.25.0	2.32.4	1
confluentinc/cp-zookeeper :7.5.1	0bec03c1f3ce	requests@2.31.0	2.32.4	1
confluentinc/cp-zookeeper :7.8.0-3-ubi8	5ca5f3269814	requests@2.32.3	2.32.4	1
confluentinc/cp-zookeeper :6.1.0	78c190f4472c	requests@2.25.0	2.32.4	1
countly/countly-server :25.05.4	e3c238248f99	requests@2.22.0-2ubuntu1 requests@2.22.0	2.22.0-2ubuntu1.1+esm1 2.32.4	1
craigwillis/c2metadata-bd :latest	ae317d7e4724	requests@2.25.0	2.32.4	1
crazymax/rtorrent-rutorrent :3.10-0.9.8-0.13.8	fb307f5b87bf	requests@2.28.1	2.32.4	1
danialnabiyan1382/lsdisk :v2.0.8	f96a7ebf1f42	requests@2.32.3	2.32.4	1
danuk/telegram-sender :0.0.1	026560388070	requests@2.28.1	2.32.4	1
daskdev/dask :1.1.0	4ecd7bc35500	requests@2.19.1	2.32.4	1
daskdev/dask-notebook :1.1.0	052630f5ca04	requests@2.21.0	2.32.4	1
datadog/agent :7.22.0	8f20e56b5311	requests@2.22.0	2.32.4	1
datadog/agent :6	aad9994de6a7	requests@2.27.1	2.32.4	1
datamate/seafile-professional :11.0.20	2dd66b722464	python-pip@22.0.2+dfsg-1ubuntu0.6 requests@2.31.0	22.0.2+dfsg-1ubuntu0.7 2.32.4	1
datawire/aes :2.0.3-ea	07f8fe4f4f8e	requests@2.25.1	2.32.4	1
datawire/aes :1.13.6	2beb65062c8b	requests@2.25.1	2.32.4	1
datawire/aes :3.11.1	95ec30b3c732	requests@2.31.0	2.32.4	1
datawire/emissary :3.12.2	1f67a1292d2a	requests@2.31.0	2.32.4	1
datawire/emissary :2.0.2-ea	9716efbdd24b	requests@2.25.1	2.32.4	1
dchesterton/amcrest2mqtt :1.0.9	cc70f2238aa9	requests@2.26.0	2.32.4	1
ddosify/selfhosted_alaz_backend :1.0.6	a43c5155fa1c	requests@2.31.0	2.32.4	1
ddosify/selfhosted_alaz_backend :2.3.11	e5be48b37348	requests@2.32.2	2.32.4	1
ddosify/selfhosted_backend :3.2.9	3c11e3182652	requests@2.32.2	2.32.4	1
ddosify/selfhosted_backend :2.6.11	ac323d52bfb4	requests@2.31.0	2.32.4	1
ddosify/selfhosted_hammermanager :1.2.4	71b8768f49bc	requests@2.31.0	2.32.4	1
ddosify/selfhosted_hammermanager :2.0.2	b796b8c73011	requests@2.31.0	2.32.4	1
deconzcommunity/deconz :2.29.2	062de2362641	requests@2.28.1+dfsg-1 requests@2.28.1	no fix listed 2.32.4	1
deconzcommunity/deconz :2.12.06	6541bbb78952	requests@2.21.0	2.32.4	1
deepflowce/deepflow-app :v6.2.6.5	a1888d35e787	requests@2.22.0	2.32.4	1
devopsgoofy/k8s-platform :latest	ad865312099f	requests@2.32.3	2.32.4	1
devopshq/artifactory-cleanup :1.0.18	30e093bffa91	requests@2.32.3	2.32.4	1
devopstales/kubedash :3.1.0	8bb837da5aec	requests@2.32.2	2.32.4	1
devopstales/kube-openid-connector :1.0	42c40a0e9f1b	requests@2.27.1	2.32.4	1
devopstales/trivy-operator :2.5	75136aa7a26e	requests@2.28.2	2.32.4	1
djjudas21/alertify :0.1.0	ba22be670c37	requests@2.32.3	2.32.4	1
djjudas21/autonodelabel :0.0.6	f17233350c4f	requests@2.31.0	2.32.4	1
dockerid31415926/pod-pvc-mapping :v0.1.3	354309669f16	requests@2.26.0	2.32.4	1
dockerid31415926/pvc-exporter :v0.1.3	5a1dd17e0e07	requests@2.26.0	2.32.4	1