StackRadar

CVE-2024-47081

Medium

Advisory

Published 9 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.010
60th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
701
of 17,787 indexed, latest versions
Container images
757
deployed by those charts
Fix available
5 of 5
affected packages

Requests vulnerable to .netrc credentials leak via malicious URLs

Carried by container images the latest versions of 701 of 17,787 indexed charts deploy, on 757 images.

Affected packageAffected versionsFixed inImages
requestspypi2.2.1, 2.6.0, 2.9.1, 2.10.0+25 more2.32.4745
requestsdeb2.2.1-1, 2.2.1-1ubuntu0.3, 2.9.1-3, 2.9.1-3ubuntu0.1+6 more2.2.1-1ubuntu0.4+esm1, 2.9.1-3ubuntu0.1+esm2, 2.18.4-2ubuntu0.1+esm2, 2.22.0-2ubuntu1.1+esm1+1 more62
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8, 2.25.1-7.el9_2+2 more0:2.20.0-6.el8_10, 0:2.25.1-10.el9_643
python-pipdeb22.0.2+dfsg-1, 22.0.2+dfsg-1ubuntu0.2, 22.0.2+dfsg-1ubuntu0.3, 22.0.2+dfsg-1ubuntu0.4+5 more22.0.2+dfsg-1ubuntu0.7, 24.0+dfsg-1ubuntu1.321
py3-requestsapk2.32.3-r02.32.4-r03
OSV records
ALPINE-CVE-2024-47081DEBIAN-CVE-2024-47081GHSA-9hjg-9r4m-mvj7RHSA-2025:12519RHSA-2025:13234UBUNTU-CVE-2024-47081
Also known as
PYSEC-2026-1872, RHSA-2025:15121, RHSA-2025:15122, RHSA-2025:15691, USN-7568-1, USN-7762-1

Charts affected

701 by stars
ChartLatestAffected imagesRadar Score
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47081.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
requests@2.32.3
2.32.4

Open the chart page →

569

Container images carrying it

757 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
douz/helpdesk:latest4384103d0219
requests@2.23.0
2.32.4
1
dpage/pgadmin4:8.418cd5711fc9a
requests@2.31.0
2.32.4
1
dpage/pgadmin4:7.537946e4f3e7b
requests@2.31.0
2.32.4
1
dpage/pgadmin4:9.252cb72a9e3da
requests@2.32.3
2.32.4
1
dpage/pgadmin4:8.13561c1f8f99f2
requests@2.32.3
2.32.4
1
dserio83/velero-watchdog:0.1.8d5deae589229
requests@2.32.3
2.32.4
1
dysnix/pritunl:v1.29-r819951e3e7a32
requests@2.23.0
2.32.4
1
eclipseaerios/aerios-k8s-shim:v1.0.0d4ed3d8e5db4
requests@2.32.3
2.32.4
1
eclipseaerios/hlo-allocator:v3.0.03cc1d94cfe96
requests@2.31.0
2.32.4
1
eclipseaerios/hlo-data-aggregator:v3.0.0b433c2b9f5dc
requests@2.31.0
2.32.4
1
eclipseaerios/hlo-deployment-engine:v3.0.0d582d39208c7
requests@2.31.0
2.32.4
1
eclipseaerios/hlo-fe-engine:v3.0.08ed2df4ca692
requests@2.31.0
2.32.4
1
elastichq/elasticsearch-hq:latestbb3bd22c2b87
requests@2.22.0
2.32.4
1
elautoestopista/raponchi:0.3.0b6f74db9fc81
requests@2.32.3
2.32.4
1
elyra/kernel-image-puller:3.2.2c922f1f1646a
requests@2.28.2
2.32.4
1
erlangsolutions/wombatoam:4.1.284680c990147a
requests@2.25.1
2.32.4
1
errbotio/errbot:6.1.900ee4e0953ab
requests@2.27.1
2.32.4
1
esphome/esphome:1.18.03f51ec10e823
requests@2.25.1
2.32.4
1
esphome/esphome:2024.3.09ab8cc88b28c
requests@2.31.0
2.32.4
1
esphome/esphome:2024.12.2b2c6322700ac
requests@2.32.3
2.32.4
1
esphome/esphome:2025.3.0def8b6e4f517
requests@2.32.3
2.32.4
1
evgkrsk/postgres-controller:0.6.237f0e1f435c3
requests@2.28.2
2.32.4
1
evk02/mlflow:2.2.1ef6ff257ef35
requests@2.28.2
2.32.4
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
requests@2.28.1
2.32.4
1
fiware/bae-activation-service:v0.0.33e3ec88d59ed
requests@2.25.0
2.32.4
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
requests@2.22.0-2ubuntu1.1
requests@2.22.0
2.22.0-2ubuntu1.1+esm1
2.32.4
1
fiware/orion-ld:1.10.03c490a746f65
requests@2.20.0
2.32.4
1
flag5/clustersecret:0.0.94ad5748bfcc6
requests@2.26.0
2.32.4
1
flagsmith/flagsmith-api:v2.6.0fd58556339a4
requests@2.24.0
2.32.4
1
fossology/fossology:4.2.18bd1f22ba7bb
requests@2.21.0
2.32.4
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
requests@2.23.0
2.32.4
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
requests@2.23.0
2.32.4
1
freeipa/freeipa-server:fedora-37-4.10.1c87d77342bf5
requests@2.28.1
2.32.4
1
galaxy/cloudman-server:lateste5c265fe9fcd
requests@2.28.1
2.32.4
1
galaxy/galaxy-init:v18.010267bad550e6
requests@2.2.1-1ubuntu0.3
requests@2.18.4
2.2.1-1ubuntu0.4+esm1
2.32.4
1
galaxy/galaxy-stable:v18.018e577a626dfd
requests@2.2.1-1ubuntu0.3
requests@2.18.4
2.2.1-1ubuntu0.4+esm1
2.32.4
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
requests@2.32.3
2.32.4
1
geonode/geoserver:2.28.4-latest81b1d431b7e9
requests@2.31.0
2.32.4
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
requests@2.24.0
2.32.4
1
gethue/hue:4.11.011b649636e68
requests@2.27.1
2.32.4
1
gethue/hue:4.10.05702b2c37ff9
requests@2.25.1
2.32.4
1
gethue/hue:latest7d5c1b9f8a79
python-pip@22.0.2+dfsg-1ubuntu0.6
requests@2.32.3
22.0.2+dfsg-1ubuntu0.7
2.32.4
1
getsentry/sentry-kubernetes:latest6ac37974fd2a
requests@2.21.0
2.32.4
1
gluufederation/opendj:4.3.0_011a1128b28b95
requests@2.25.1
2.32.4
1
gmaas2/github-api:latest148fc2d9afe9
requests@2.28.1
2.32.4
1
gmelillo/registry:0.1.8c599d608a2f7
requests@2.26.0
2.32.4
1
goofball222/pritunl:1.30.3070.5943c0743701d4
requests@2.26.0
2.32.4
1
goofball222/pritunl:1.32.3602.807bf26032dfce
requests@2.28.2
2.32.4
1
greenbirdit/locust:0.9.0e99d53bdc944
requests@2.21.0
2.32.4
1
gristlabs/grist:0.7.96e71b1914a7e
requests@2.27.1
2.32.4
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.