StackRadar

CVE-2024-6345

High

Advisory

Published 15 Jul 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.019
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
974
of 17,787 indexed, latest versions
Container images
1,036
deployed by those charts
Fix available
17 of 17
affected packages

setuptools vulnerable to Command Injection via package URL

Carried by container images the latest versions of 974 of 17,787 indexed charts deploy, on 1,036 images.

Affected packageAffected versionsFixed inImages
setuptoolspypi0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+103 more70.0.0986
python-setuptoolsrpm0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+3 more0:0.9.8-7.el7_9.1, 0:39.2.0-6.el8_4.1, 0:39.2.0-7.el8_6.1, 0:39.2.0-7.el8_8.1+3 more115
setuptoolsdeb45.2.0-1, 45.2.0-1ubuntu0.1, 59.6.0-1.2, 59.6.0-1.2ubuntu0.22.04.1+2 more45.2.0-1ubuntu0.2, 59.6.0-1.2ubuntu0.22.04.2, 66.1.1-1+deb12u1, 68.1.2-2ubuntu1.1101
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+11 more1.5.4-1ubuntu4+esm5, 8.1.1-2ubuntu0.6+esm8, 9.0.1-2.3~ubuntu1.18.04.8+esm4, 20.0.2-5ubuntu1.10+esm260
python-setuptoolsdeb3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more3.3-1ubuntu2+esm2, 20.7.0-1ubuntu0.1~esm2, 39.0.1-2ubuntu0.1+esm1, 44.0.0-2ubuntu0.1+esm139
py3-setuptoolsapk65.6.0-r0, 67.7.2-r0, 68.2.2-r0, 69.5.1-r070.3.0-r021
python-chardetrpm3.0.4-7.el80:3.0.4-19.module+el8.4.0+9822+20bf124920
python-idnarpm2.5-5.el80:2.10-3.module+el8.4.0+9822+20bf124920
python-pysocksrpm1.6.8-3.el80:1.7.1-4.module+el8.4.0+9822+20bf124920
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_80:2.25.0-2.module+el8.4.0+9822+20bf124920
python-urllib3rpm1.24.2-5.el8, 1.24.2-5.el8_6.10:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be120
python3x-setuptoolsrpm41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+548604230:50.3.2-3.module+el8.4.0+22168+8a561f05.2, 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b9
python-plyrpm3.9-9.el80:3.11-10.module+el8.4.0+9822+20bf12497
python39rpm3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.10:3.9.2-2.module+el8.4.0+20027+45e0e702.2, 0:3.9.16-1.module+el8.8.0+20025+f2100191.26
python3x-piprpm19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf12490:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c4884
python3.11-setuptoolsrpm65.5.1-2.el90:65.5.1-2.el9_4.11
python-wheelrpm0.33.6-5.module+el8.4.0+8888+89bc7e791:0.35.1-3.module+el8.4.0+15042+dc5a279b.11
OSV records
ALPINE-CVE-2024-6345DEBIAN-CVE-2024-6345GHSA-cx63-2mw6-8hw5RHSA-2024:5000RHSA-2024:5040RHSA-2024:5078RHSA-2024:5084RHSA-2024:5137RHSA-2024:5279RHSA-2024:5530RHSA-2024:5534RHSA-2024:6220RHSA-2024:6488RHSA-2024:6662UBUNTU-CVE-2024-6345RLSA-2024:5530
Also known as
BIT-setuptools-2024-6345, PYSEC-2026-1918, RHSA-2024:6907, USN-7002-1

Charts affected

974 by stars
ChartLatestAffected imagesRadar Score
slackgptkfirfer0.0.61 of 1See more

slackgpt kfirfer 0.0.6

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kfirfer/slackgpt:0.0.15461331bd838e
setuptools@65.5.1
70.0.0

Open the chart page →

1,126
kimai-helmchartkimai2tet0.1.01 of 2See more

kimai-helmchart kimai2tet 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
70.0.0

Open the chart page →

1,518
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
python-pip@9.0.1-2.3~ubuntu1
python-setuptools@39.0.1-2
setuptools@39.0.1
9.0.1-2.3~ubuntu1.18.04.8+esm4
39.0.1-2ubuntu0.1+esm1
70.0.0

Open the chart page →

14,813
kubeflowkromanow94-kubeflow0.5.15 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

5 of the 30 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kubeflownotebookswg/jupyter-web-app:v1.9.2afb52057c997
setuptools@65.5.1
70.0.0
kubeflownotebookswg/tensorboards-web-app:v1.9.277f07f52a84a
setuptools@65.5.1
70.0.0
kubeflownotebookswg/volumes-web-app:v1.9.2f63c3e550af3
setuptools@65.5.1
70.0.0
library/python:3.7eedf63967cdb
setuptools@57.5.0
70.0.0
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
setuptools@57.5.0
70.0.0

Open the chart page →

70,530
lnbitskronkltdVerified publisher0.1.01 of 1See more

lnbits kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:latest26fae6327477
setuptools@65.5.1
70.0.0

Open the chart page →

1,444
specter-desktopkronkltdVerified publisher0.1.01 of 1See more

specter-desktop kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lncm/specter-desktop:v0.10.4bca14d04397d
setuptools@50.3.0
70.0.0

Open the chart page →

1,850
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
setuptools@52.0.0
70.0.0

Open the chart page →

4,230
pavkrzwiatrzyk0.0.31 of 1See more

pav krzwiatrzyk 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
witcherek7/pav:0.0.342a744f29ac0
setuptools@65.5.1
70.0.0

Open the chart page →

1,132
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
setuptools@65.5.1
70.0.0

Open the chart page →

8,405
jupyterhubkubeblocksVerified publisher0.1.02 of 7See more

jupyterhub kubeblocks 0.1.0

2 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
setuptools@65.5.1
70.0.0
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
setuptools@65.5.1
70.0.0

Open the chart page →

7,356
lokikubeblocksVerified publisher5.39.01 of 5See more

loki kubeblocks 5.39.0

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.24.35af76eebbba7
setuptools@65.5.1
70.0.0

Open the chart page →

5,841
smartfs-csi-driverkubeblocksVerified publisher0.1.21 of 6See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-3.el8_8
python-setuptools@39.2.0-7.el8
python-urllib3@1.24.2-5.el8
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-7.el8_8.1
0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
70.0.0

Open the chart page →

9,249
kube-janitorkube-janitor0.3.31 of 1See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
hjacobs/kube-janitor:23.7.0fbb303ed463c
setuptools@65.5.1
70.0.0

Open the chart page →

4,293
pypiserverkubernetes-replicator0.0.11 of 1See more

pypiserver kubernetes-replicator 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
pypiserver/pypiserver:v1.4.2c9250d3c418d
setuptools@50.3.0
70.0.0

Open the chart page →

1,614
whatsappkubernetes-whatsappVerified publisher0.1.81 of 4See more

whatsapp kubernetes-whatsapp 0.1.8

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/python:3.8-alpine3d93b1f77efc
setuptools@57.5.0
70.0.0

Open the chart page →

1,574
gitlabkubesphereVerified publisher4.2.33 of 17See more

gitlab kubesphere 4.2.3

3 of the 17 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
mirrorgitlabcontainers/gitlab-sidekiq-ce:v13.2.294d1431683fa
setuptools@47.3.1
70.0.0
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
setuptools@47.3.1
70.0.0
mirrorgitlabcontainers/gitlab-webservice-ce:v13.2.230393f990f5c
setuptools@47.3.1
70.0.0

Open the chart page →

38,133
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
setuptools@56.0.0
70.0.0

Open the chart page →

18,316
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
python-pip@20.0.2-5ubuntu1.5
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

14,320
online-boutiquekubesphere-testVerified publisher0.1.02 of 11See more

online-boutique kubesphere-test 0.1.0

2 of the 11 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3360130ab5850
setuptools@54.1.1
70.0.0
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
setuptools@54.1.1
70.0.0

Open the chart page →

26,018
sample-bookinfokubesphere-testVerified publisher1.0.01 of 4See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kubesphere/examples-bookinfo-productpage-v1:1.13.0378f49ec9c44
setuptools@41.0.1
70.0.0

Open the chart page →

9,378
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
70.0.0

Open the chart page →

8,698
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/sdk-py:v1.20.0f108f49570cc
setuptools@65.5.1
70.0.0

Open the chart page →

20,204
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
setuptools@59.6.0
70.0.0

Open the chart page →

6,824
strimzi-kafka-operatorkvalitetsitVerified publisher0.36.11 of 1See more

strimzi-kafka-operator kvalitetsit 0.36.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.36.1e9e03b31007c
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-7.el8_8.1
70.0.0

Open the chart page →

4,098
kyso-nbdimekyso1.0.01 of 1See more

kyso-nbdime kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kyso/kyso-nbdime:latest4aa9d38ee81d
setuptools@65.5.1
70.0.0

Open the chart page →

2,765
large-systems-djangolarge-systems-djangoVerified publisher1.0.01 of 1See more

large-systems-django large-systems-django 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ha33ona/python:test6affdfc644d0
setuptools@57.5.0
70.0.0

Open the chart page →

3,891
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
setuptools@68.1.2
70.0.0

Open the chart page →

2,149
jenkinsleechistest2.7.11 of 2See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.193170069ff0976
setuptools@49.6.0
70.0.0

Open the chart page →

4,423
legendlegend0.1.21 of 1See more

legend legend 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/grofers/legend:0.1d6e901ad0ebd
setuptools@50.3.2
70.0.0

Open the chart page →

4,067
owntracks-exporterleprechaun-charts0.1.111 of 1See more

owntracks-exporter leprechaun-charts 0.1.11

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
setuptools@65.5.1
70.0.0

Open the chart page →

4,041
delugelib42Verified publisher1.3.01 of 1See more

deluge lib42 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lib42/deluge:20c4d1d326f95
setuptools@65.5.1
70.0.0

Open the chart page →

898
llm-dllm-dVerified publisher1.0.231 of 2See more

llm-d llm-d 1.0.23

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/llm-d/llm-d-model-service:v0.0.158b99a8104a2f
setuptools@53.0.0
70.0.0

Open the chart page →

2,507
lnbitslnbits0.2.11 of 1See more

lnbits lnbits 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
setuptools@65.7.0
70.0.0

Open the chart page →

1,949
weather-app-chartlocal-weatherapp0.1.01 of 4See more

weather-app-chart local-weatherapp 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
youssef11gaber10/deployment-weather-flask:latest96bce8b8b5a7
setuptools@57.5.0
70.0.0

Open the chart page →

5,905
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
locustio/locust:2.24.151d866285170
setuptools@65.5.0
70.0.0

Open the chart page →

7,510
nightingalelogic3579Verified publisher0.3.11 of 6See more

nightingale logic3579 0.3.1

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
70.0.0

Open the chart page →

8,938
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
logiqai/toolbox:2.0.155a574ec5b64
setuptools@42.0.2.post20191202
70.0.0

Open the chart page →

23,613
alert-stream-schema-registrylsst-sqre2.1.01 of 1See more

alert-stream-schema-registry lsst-sqre 2.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lsstdm/lsst_alert_packet:tickets-DM-3274374c97a490940
setuptools@57.5.0
70.0.0

Open the chart page →

2,293
alert-stream-simulatorlsst-sqre1.6.21 of 1See more

alert-stream-simulator lsst-sqre 1.6.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lsstdm/alert-stream-simulator:v1.2.1973df082d006
setuptools@57.5.0
70.0.0

Open the chart page →

2,089
exposureloglsst-sqre0.2.11 of 1See more

exposurelog lsst-sqre 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lsstsqre/exposurelog:0.8.079b00fb67a65
setuptools@60.8.2
70.0.0

Open the chart page →

2,078
kafka-aggregatorlsst-sqre0.1.21 of 1See more

kafka-aggregator lsst-sqre 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lsstsqre/kafkaaggregator:masterbe1b21060854
setuptools@54.1.2
70.0.0

Open the chart page →

3,052
nubladolsst-sqre0.9.233 of 5See more

nublado lsst-sqre 0.9.23

3 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lsstsqre/prepuller:latest19c2dfc4e4ff
setuptools@56.0.0
70.0.0
lsstsqre/sciplat-hub:latest5e0ade6bed1c
setuptools@0.9.8
70.0.0
lsstsqre/wfdispatcher:lateste9feb99f524d
setuptools@39.2.0
70.0.0

Open the chart page →

5,786
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
python-pip@20.0.2-5ubuntu1.6
python-setuptools@44.0.0-2
setuptools@45.2.0-1
setuptools@60.5.0
20.0.2-5ubuntu1.10+esm2
44.0.0-2ubuntu0.1+esm1
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

17,779
opendistro-eslsst-sqre1.4.11 of 3See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.4.06df71eb04639
setuptools@0.9.8
70.0.0

Open the chart page →

7,929
sasquatchlsst-sqre0.1.132 of 6See more

sasquatch lsst-sqre 0.1.13

2 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lsstsqre/kafkaconnect:0.9.34143c7cd705e
setuptools@57.5.0
70.0.0
lsstsqre/strimzi-registry-operator:0.4.1e139fde946d7
setuptools@57.5.0
70.0.0

Open the chart page →

9,332
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lsstsqre/squash-api:0.5.34879415ec6ac
setuptools@51.0.0
70.0.0

Open the chart page →

6,611
kube-hunterm9sweeperVerified publisher1.6.01 of 1See more

kube-hunter m9sweeper 1.6.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
aquasec/kube-hunter:0.6.8e64fe49f059f
setuptools@57.5.0
70.0.0

Open the chart page →

997
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
setuptools@65.5.1
70.0.0

Open the chart page →

7,315
novosgamarcusrepo0.1.11 of 2See more

novosga marcusrepo 0.1.1

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
70.0.0

Open the chart page →

3,706
webapp-colormarcusrepo0.1.11 of 1See more

webapp-color marcusrepo 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kodekloud/webapp-color:latest99c3821ea49b
setuptools@40.4.3
70.0.0

Open the chart page →

911

Container images carrying it

1,036 by charts deploying them

A fixed version is listed for 17 of the 17 affected packages.

Container imageDigestPackageFixed inUsed by
langgenius/dify-plugin-daemon:main-localda995c129e2f
setuptools@68.1.2
70.0.0
1
langgenius/dify-sandbox:0.2.124e65e8a351a2
setuptools@65.5.1
70.0.0
1
lib42/deluge:20c4d1d326f95
setuptools@65.5.1
70.0.0
1
library/crate:4.7.0c7984a05e15b
setuptools@39.2.0
70.0.0
1
library/python:3.8-alpine3d93b1f77efc
setuptools@57.5.0
70.0.0
1
library/python:3.8d41127070014
setuptools@57.5.0
70.0.0
1
librenms/librenms:22.4.14f1f3d667cc7
setuptools@62.1.0
70.0.0
1
linuxserver/babybuddy:1.10.2f7d7c7704249
setuptools@52.0.0
70.0.0
1
linuxserver/beets:1.5.0e36d16f7341c
setuptools@56.0.0
70.0.0
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
setuptools@45.2.0-1
45.2.0-1ubuntu0.2
1
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
setuptools@40.7.2
70.0.0
1
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
setuptools@42.0.2.post20191202
70.0.0
1
linuxserver/deluge:18.04.10ac871624394
python-setuptools@39.0.1-2
39.0.1-2ubuntu0.1+esm1
1
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
python-setuptools@39.0.1-2
39.0.1-2ubuntu0.1+esm1
1
linuxserver/healthchecks:version-v1.20.050792a72fc71
setuptools@56.0.0
70.0.0
1
linuxserver/healthchecks:2.7.2023033194696dab3c50
setuptools@65.5.0
70.0.0
1
linuxserver/medusa:v0.3.9-ls340a5f5114128b
setuptools@41.2.0
70.0.0
1
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
setuptools@42.0.2.post20191202
70.0.0
1
linuxserver/yq:3.2.26f5b9586a93e
setuptools@65.5.0
70.0.0
1
lnbitsdocker/lnbits-legend:latest26fae6327477
setuptools@65.5.1
70.0.0
1
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
setuptools@65.7.0
70.0.0
1
lncm/specter-desktop:v0.10.4bca14d04397d
setuptools@50.3.0
70.0.0
1
localstack/localstack:3.19d278167f2b7
setuptools@69.0.3
70.0.0
1
locustio/locust:2.24.151d866285170
setuptools@65.5.0
70.0.0
1
logiqai/toolbox:2.0.155a574ec5b64
setuptools@42.0.2.post20191202
70.0.0
1
lsstdm/alert-stream-simulator:v1.2.1973df082d006
setuptools@57.5.0
70.0.0
1
lsstdm/lsst_alert_packet:tickets-DM-3274374c97a490940
setuptools@57.5.0
70.0.0
1
lsstsqre/exposurelog:0.8.079b00fb67a65
setuptools@60.8.2
70.0.0
1
lsstsqre/kafkaaggregator:masterbe1b21060854
setuptools@54.1.2
70.0.0
1
lsstsqre/kafkaconnect:0.9.34143c7cd705e
setuptools@57.5.0
70.0.0
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
python-pip@20.0.2-5ubuntu1.6
python-setuptools@44.0.0-2
setuptools@45.2.0-1
setuptools@60.5.0
20.0.2-5ubuntu1.10+esm2
44.0.0-2ubuntu0.1+esm1
45.2.0-1ubuntu0.2
70.0.0
1
lsstsqre/prepuller:latest19c2dfc4e4ff
setuptools@56.0.0
70.0.0
1
lsstsqre/sciplat-hub:latest5e0ade6bed1c
setuptools@0.9.8
70.0.0
1
lsstsqre/squash-api:0.5.34879415ec6ac
setuptools@51.0.0
70.0.0
1
lsstsqre/strimzi-registry-operator:0.4.1e139fde946d7
setuptools@57.5.0
70.0.0
1
lsstsqre/wfdispatcher:lateste9feb99f524d
setuptools@39.2.0
70.0.0
1
makersquad/harp-proxy:0.8.1a40dd258c527
setuptools@66.1.1
70.0.0
1
marcinkujawski/flask-app:2.0.1a455017b9d0e
setuptools@57.5.0
70.0.0
1
mariadb/maxscale:23.02.256c5e0908148
setuptools@39.2.0
python-setuptools@39.2.0-7.el8
70.0.0
0:39.2.0-8.el8_10
1
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
setuptools@57.5.0
70.0.0
1
matrixdotorg/synapse:v1.78.0def97fd537d8
setuptools@65.5.1
70.0.0
1
mcronce/yadms-ftp:latestf820ef2e3c26
setuptools@41.6.0
70.0.0
1
mcronce/yadms-web:latestc03c1c7f5aa9
setuptools@41.6.0
70.0.0
1
mediagis/nominatim:5.3.27923a8e67197
setuptools@68.1.2
70.0.0
1
mediagis/nominatim:3.7c15e941485ef
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0
1
mediagis/nominatim:4.2d0eae7b51374
setuptools@59.6.0-1.2ubuntu0.22.04.1
setuptools@59.6.0
59.6.0-1.2ubuntu0.22.04.2
70.0.0
1
mher/flower:2.051c3c3db5be3
setuptools@65.5.1
70.0.0
1
middlewareeng/middleware:0.3.1747d880812f1
setuptools@58.1.0
70.0.0
1
milesmcc/shynet:v0.13.1ba54f7797a6b
setuptools@65.6.3
70.0.0
1
milesmcc/shynet:v0.12.0e821e31140f7
setuptools@57.5.0
70.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.