StackRadar

CVE-2024-47081

Medium

Advisory

Published 9 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.010
60th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
701
of 17,787 indexed, latest versions
Container images
757
deployed by those charts
Fix available
5 of 5
affected packages

Requests vulnerable to .netrc credentials leak via malicious URLs

Carried by container images the latest versions of 701 of 17,787 indexed charts deploy, on 757 images.

Affected packageAffected versionsFixed inImages
requestspypi2.2.1, 2.6.0, 2.9.1, 2.10.0+25 more2.32.4745
requestsdeb2.2.1-1, 2.2.1-1ubuntu0.3, 2.9.1-3, 2.9.1-3ubuntu0.1+6 more2.2.1-1ubuntu0.4+esm1, 2.9.1-3ubuntu0.1+esm2, 2.18.4-2ubuntu0.1+esm2, 2.22.0-2ubuntu1.1+esm1+1 more62
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8, 2.25.1-7.el9_2+2 more0:2.20.0-6.el8_10, 0:2.25.1-10.el9_643
python-pipdeb22.0.2+dfsg-1, 22.0.2+dfsg-1ubuntu0.2, 22.0.2+dfsg-1ubuntu0.3, 22.0.2+dfsg-1ubuntu0.4+5 more22.0.2+dfsg-1ubuntu0.7, 24.0+dfsg-1ubuntu1.321
py3-requestsapk2.32.3-r02.32.4-r03
OSV records
ALPINE-CVE-2024-47081DEBIAN-CVE-2024-47081GHSA-9hjg-9r4m-mvj7RHSA-2025:12519RHSA-2025:13234UBUNTU-CVE-2024-47081
Also known as
PYSEC-2026-1872, RHSA-2025:15121, RHSA-2025:15122, RHSA-2025:15691, USN-7568-1, USN-7762-1

Charts affected

701 by stars
ChartLatestAffected imagesRadar Score
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47081.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
requests@2.32.3
2.32.4

Open the chart page →

569

Container images carrying it

757 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
juicedata/juicefs-csi-driver:v0.32.595008ba63318
requests@2.28.1
requests@2.28.1+dfsg-1
2.32.4
no fix listed
1
juicedata/juicefs-csi-driver:v0.23.0d915e899e322
requests@2.25.1
2.32.4
1
julb/alertmanager-gchat-integration:1.0.5837c4038a0dd
requests@2.25.1
2.32.4
1
julb/kubernetes-configmap-sync:1.1.0d7d8836366ad
requests@2.25.0
2.32.4
1
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
requests@2.31.0
2.32.4
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
requests@2.25.0
2.32.4
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
requests@2.25.1
2.32.4
1
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
requests@2.31.0
2.32.4
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
requests@2.24.0
2.32.4
1
keitaro/ckan-datapusher:0.0.175bf1a45f45c1
requests@2.24.0
2.32.4
1
kelvinsp/mlflow:1.26.1cd33e6db2a59
requests@2.27.1
2.32.4
1
kfirfer/elasticsearch-cacher:0.0.1cf81d0959256
requests@2.31.0
2.32.4
1
kfirfer/kibana-index-pattern-updater:1.0.12e88cfcec5c93
requests@2.25.1
2.32.4
1
kfirfer/scripts:0.0.2481e5c4e5d70e
requests@2.26.0
2.32.4
1
kfirfer/slackgpt:0.0.15461331bd838e
requests@2.31.0
2.32.4
1
kfserving/models-web-app:v0.6.1f322d6ffdfa3
requests@2.26.0
2.32.4
1
kinseii/wazuh-agent:4.14.17160eb143728
requests@2.28.1+dfsg-1
requests@2.28.1
no fix listed
2.32.4
1
kiwigrid/k8s-sidecar:1.1.03e86186656d3
requests@2.24.0
2.32.4
1
kiwigrid/k8s-sidecar:1.3.065095a82d4a1
requests@2.24.0
2.32.4
1
kiwigrid/k8s-sidecar:0.0.186eb52513d59e
requests@2.21.0
2.32.4
1
kiwigrid/k8s-sidecar:1.12.089739be9ff38
requests@2.24.0
2.32.4
1
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
requests@2.21.0
2.32.4
1
kiwigrid/k8s-sidecar:0.1.20af151f677a63
requests@2.22.0
2.32.4
1
kiwigrid/k8s-sidecar:1.27.6db85bd553253
requests@2.32.3
2.32.4
1
kiwigrid/k8s-sidecar:1.26.2e271016441af
requests@2.31.0
2.32.4
1
knspar/phronetis:0.1.4609499d2dc91a
python-pip@24.0+dfsg-1ubuntu1.1
24.0+dfsg-1ubuntu1.3
1
kobotoolbox/kobocat:2.022.24ab15679454415
requests@2.27.1
2.32.4
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
requests@2.27.1
2.32.4
1
kocolosk/couchdb-statefulset-assembler:1.2.06effb982154e
requests@2.18.4
2.32.4
1
kong/httpbin:latesta6ac46531193
python-pip@22.0.2+dfsg-1ubuntu0.5
22.0.2+dfsg-1ubuntu0.7
1
kserve/models-web-app:v0.8.063ea05e73842
requests@2.28.1
2.32.4
1
kserve/models-web-app:v0.13.073486345a602
requests@2.32.3
2.32.4
1
kubeflownotebookswg/jupyter-web-app:v1.9.2afb52057c997
requests@2.32.3
2.32.4
1
kubeflownotebookswg/jupyter-web-app:v1.6.1d762690e21c1
requests@2.28.1
2.32.4
1
kubeflownotebookswg/tensorboards-web-app:v1.6.10876fef1973b
requests@2.28.1
2.32.4
1
kubeflownotebookswg/tensorboards-web-app:v1.9.277f07f52a84a
requests@2.32.3
2.32.4
1
kubeflownotebookswg/volumes-web-app:v1.6.17299fa94db15
requests@2.28.1
2.32.4
1
kubeflownotebookswg/volumes-web-app:v1.9.2f63c3e550af3
requests@2.32.3
2.32.4
1
kubegems/juicefs-mount:ce-v1.1.010abb76892b8
requests@2.21.0
2.32.4
1
kubesphere/examples-bookinfo-productpage-v1:1.13.0378f49ec9c44
requests@2.20.0
2.32.4
1
kubesphere/rbd-provisioner:v2.1.1-k8s1.11b8ad79759bcd
requests@2.6.0
2.32.4
1
kubitodev/traefik-ip-whitelist-sync:1.0.2aa24869319bf
requests@2.28.1
2.32.4
1
kusionstack/kusion:v0.14.0126c8f0b0976
python-pip@22.0.2+dfsg-1ubuntu0.5
22.0.2+dfsg-1ubuntu0.7
1
kyso/kyso-nbdime:latest4aa9d38ee81d
requests@2.28.1
2.32.4
1
langgenius/dify-api:1.0.0066035f93856
requests@2.31.0
2.32.4
1
langgenius/dify-api:0.6.11fca918260dd6
requests@2.31.0
2.32.4
1
langgenius/dify-sandbox:0.2.124e65e8a351a2
requests@2.32.3
2.32.4
1
langgenius/dify-sandbox:0.2.15750e1111426e
requests@2.32.3
2.32.4
1
library/couchdb:2.3.0ee75c9a737e7
requests@2.12.4
2.32.4
1
librenms/librenms:22.4.14f1f3d667cc7
requests@2.26.0
2.32.4
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.