CVE-2024-47081

Medium

Advisory

Published 9 Jun 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.010; 60th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 701; of 17,790 indexed, latest versions
Container images: 756; deployed by those charts
Fix available: 5 of 5; affected packages

Requests vulnerable to .netrc credentials leak via malicious URLs

Carried by container images the latest versions of 701 of 17,790 indexed charts deploy, on 756 images.

Affected package	Affected versions	Fixed in	Images
requestspypi	2.2.1, 2.6.0, 2.9.1, 2.10.0+25 more	2.32.4	744
requestsdeb	2.2.1-1, 2.2.1-1ubuntu0.3, 2.9.1-3, 2.9.1-3ubuntu0.1+6 more	2.2.1-1ubuntu0.4+esm1, 2.9.1-3ubuntu0.1+esm2, 2.18.4-2ubuntu0.1+esm2, 2.22.0-2ubuntu1.1+esm1+1 more	61
python-requestsrpm	2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8, 2.25.1-7.el9_2+2 more	0:2.20.0-6.el8_10, 0:2.25.1-10.el9_6	43
python-pipdeb	22.0.2+dfsg-1, 22.0.2+dfsg-1ubuntu0.2, 22.0.2+dfsg-1ubuntu0.3, 22.0.2+dfsg-1ubuntu0.4+5 more	22.0.2+dfsg-1ubuntu0.7, 24.0+dfsg-1ubuntu1.3	21
py3-requestsapk	2.32.3-r0	2.32.4-r0	3

OSV records: ALPINE-CVE-2024-47081 DEBIAN-CVE-2024-47081 GHSA-9hjg-9r4m-mvj7 RHSA-2025:12519 RHSA-2025:13234 UBUNTU-CVE-2024-47081
Also known as: PYSEC-2026-1872, RHSA-2025:15121, RHSA-2025:15122, RHSA-2025:15691, USN-7568-1, USN-7762-1

Charts affected

701 by stars

Chart

Latest

Affected images

Radar Score

zerossl-cert-managerzerossl-cert-manager

0.1.0

1 of 2 See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47081.

Container image	Digest	Package	Fixed in
andreymileshin/zerossl-issuer :v1.0.0	e0825acc9e48	requests@2.32.3	2.32.4

Open the chart page →

569

Container images carrying it

756 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
oomk8s/readiness-check :2.0.2	875814cc853d	requests@2.21.0	2.32.4	11
oomk8s/readiness-check :2.0.0	7daa08b81954	requests@2.18.4	2.32.4	6
opea/llm-tgi :1.0	0c25aab3f106	requests@2.32.3	2.32.4	4
shashkist/flask-contacts-app :latest	581de1fd6084	requests@2.32.3	2.32.4	4
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	requests@2.26.0	2.32.4	3
dpage/pgadmin4 :6.12	781369df9994	requests@2.26.0	2.32.4	3
kiwigrid/k8s-sidecar :0.1.193	170069ff0976	requests@2.22.0	2.32.4	3
kiwigrid/k8s-sidecar :1.28.0	4166a019eeaf	requests@2.32.3	2.32.4	3
kiwigrid/k8s-sidecar :0.1.151	7b98eecdf6d1	requests@2.22.0	2.32.4	3
kiwigrid/k8s-sidecar :1.30.2	cdb361e67b1b	requests@2.32.3	2.32.4	3
louislam/uptime-kuma :2.5.4	917318f9d7be	requests@2.28.1 requests@2.28.1+dfsg-1	2.32.4 no fix listed	3
quay.io/devtron/ai-agent :0.0.1	6545dac92173	requests@2.32.3	2.32.4	3
quay.io/kiwigrid/k8s-sidecar :1.14.2	35654389f8a9	requests@2.25.1	2.32.4	3
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	python-requests@2.20.0-2.1.el8_1 requests@2.20.0	0:2.20.0-6.el8_10 2.32.4	3
amancevice/superset :0.35.2	12a0a9e66550	requests@2.22.0	2.32.4	2
aquasec/kube-hunter :0.6.8	e64fe49f059f	requests@2.27.1	2.32.4	2
blakeblackshear/frigate :0.11.1	8330b0a265b8	requests@2.27.1	2.32.4	2
confluentinc/cp-kafka :6.2.11-1-ubi8	ac776fad95a5	requests@2.31.0	2.32.4	2
confluentinc/cp-zookeeper :latest	7610a50b13e7	requests@2.32.3	2.32.4	2
confluentinc/cp-zookeeper :6.2.11-1-ubi8	cae577096489	requests@2.31.0	2.32.4	2
cs3org/wopiserver :v9.4.2	02a9e78757b4	requests@2.28.2	2.32.4	2
datawire/aes :1.14.4	8588eafe6862	requests@2.25.1	2.32.4	2
hjacobs/kube-downscaler :23.2.0-6-gc9b88e8	4b2147f47425	requests@2.31.0	2.32.4	2
hjacobs/kube-ops-view :20.4.0	58221b57d4d2	requests@2.23.0	2.32.4	2
istio/examples-bookinfo-productpage-v1 :1.15.0	0a5eb4795952	requests@2.21.0	2.32.4	2
istio/examples-bookinfo-productpage-v1 :1.14.0	22a0410f35a8	requests@2.21.0	2.32.4	2
kiwigrid/k8s-sidecar :1.24.4	4138bea678f0	requests@2.31.0	2.32.4	2
kiwigrid/k8s-sidecar :1.24.3	5af76eebbba7	requests@2.29.0	2.32.4	2
langgenius/dify-sandbox :0.2.0	09b7e8705673	requests@2.31.0	2.32.4	2
larribas/mlflow :1.9.1	05ccb0b46bfb	requests@2.24.0	2.32.4	2
lncm/specter-desktop :v1.10.5	36eaa06f99f4	requests@2.26.0	2.32.4	2
locustio/locust :2.32.2	a0d4b88e42c1	requests@2.32.3	2.32.4	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	requests@2.28.1 requests@2.28.1+dfsg-1	2.32.4 no fix listed	2
louislam/uptime-kuma :2.5.0	a8610b3b4c38	requests@2.28.1+dfsg-1 requests@2.28.1	no fix listed 2.32.4	2
neuvector/manager :3.2.1	f1b7d666eae0	requests@2.22.0	2.32.4	2
ngoduykhanh/powerdns-admin :v0.2.4	ba36ab196d3d	requests@2.24.0	2.32.4	2
omecproject/kubernetes-synchronizer :comac-1.0.0	7c17a7b1d1ef	requests@2.22.0	2.32.4	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	requests@2.18.4	2.32.4	2
opea/embedding-tei :1.0	5c9639de61c1	requests@2.32.3	2.32.4	2
opea/reranking-tei :1.0	e48613afb191	requests@2.32.3	2.32.4	2
opea/retriever-redis :1.0	eb746b263705	requests@2.32.3	2.32.4	2
opendatacube/ows :latest	668cbb41473c	requests@2.32.3	2.32.4	2
sealife/fritzbox-exporter :1.0	f5cc2f0f4c9b	requests@2.25.1	2.32.4	2
tzahi12345/youtubedl-material :4.3.2 :latest	2f943d584711	python-pip@22.0.2+dfsg-1ubuntu0.2	22.0.2+dfsg-1ubuntu0.7	2
weblate/weblate :4.2.2-1	69c160d37a3c	requests@2.24.0	2.32.4	2
wurstmeister/zookeeper :latest	7a7fd44a7210	requests@2.2.1-1 requests@2.2.1	2.2.1-1ubuntu0.4+esm1 2.32.4	2
ghcr.io/kiwigrid/k8s-sidecar :1.29.1	42002d66ddb3	requests@2.32.3	2.32.4	2
ghcr.io/rss3-network/agentdata :0.1.0	fd8d3e6e4cdf	requests@2.32.3	2.32.4	2
ghcr.io/smarter-project/home-ha-mock :main	95ee018cf558	requests@2.32.3	2.32.4	2
quay.io/cephcsi/cephcsi :v3.17.1	0b62db8afc9b	requests@2.25.1	2.32.4	2