StackRadar

CVE-2024-6345

High

Advisory

Published 15 Jul 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.019
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
986
of 17,787 indexed, latest versions
Container images
1,047
deployed by those charts
Fix available
17 of 17
affected packages

setuptools vulnerable to Command Injection via package URL

Carried by container images the latest versions of 986 of 17,787 indexed charts deploy, on 1,047 images.

Affected packageAffected versionsFixed inImages
setuptoolspypi0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+104 more70.0.0997
python-setuptoolsrpm0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+3 more0:0.9.8-7.el7_9.1, 0:39.2.0-6.el8_4.1, 0:39.2.0-7.el8_6.1, 0:39.2.0-7.el8_8.1+3 more117
setuptoolsdeb45.2.0-1, 45.2.0-1ubuntu0.1, 59.6.0-1.2, 59.6.0-1.2ubuntu0.22.04.1+2 more45.2.0-1ubuntu0.2, 59.6.0-1.2ubuntu0.22.04.2, 66.1.1-1+deb12u1, 68.1.2-2ubuntu1.1102
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+11 more1.5.4-1ubuntu4+esm5, 8.1.1-2ubuntu0.6+esm8, 9.0.1-2.3~ubuntu1.18.04.8+esm4, 20.0.2-5ubuntu1.10+esm260
python-setuptoolsdeb3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more3.3-1ubuntu2+esm2, 20.7.0-1ubuntu0.1~esm2, 39.0.1-2ubuntu0.1+esm1, 44.0.0-2ubuntu0.1+esm139
py3-setuptoolsapk65.6.0-r0, 67.7.2-r0, 68.2.2-r0, 69.5.1-r070.3.0-r021
python-chardetrpm3.0.4-7.el80:3.0.4-19.module+el8.4.0+9822+20bf124920
python-idnarpm2.5-5.el80:2.10-3.module+el8.4.0+9822+20bf124920
python-pysocksrpm1.6.8-3.el80:1.7.1-4.module+el8.4.0+9822+20bf124920
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_80:2.25.0-2.module+el8.4.0+9822+20bf124920
python-urllib3rpm1.24.2-5.el8, 1.24.2-5.el8_6.10:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be120
python3x-setuptoolsrpm41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+548604230:50.3.2-3.module+el8.4.0+22168+8a561f05.2, 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b9
python-plyrpm3.9-9.el80:3.11-10.module+el8.4.0+9822+20bf12497
python39rpm3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.10:3.9.2-2.module+el8.4.0+20027+45e0e702.2, 0:3.9.16-1.module+el8.8.0+20025+f2100191.26
python3x-piprpm19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf12490:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c4884
python3.11-setuptoolsrpm65.5.1-2.el90:65.5.1-2.el9_4.11
python-wheelrpm0.33.6-5.module+el8.4.0+8888+89bc7e791:0.35.1-3.module+el8.4.0+15042+dc5a279b.11
OSV records
ALPINE-CVE-2024-6345DEBIAN-CVE-2024-6345GHSA-cx63-2mw6-8hw5RHSA-2024:5000RHSA-2024:5040RHSA-2024:5078RHSA-2024:5084RHSA-2024:5137RHSA-2024:5279RHSA-2024:5530RHSA-2024:5534RHSA-2024:6220RHSA-2024:6488RHSA-2024:6662UBUNTU-CVE-2024-6345RLSA-2024:5530
Also known as
BIT-setuptools-2024-6345, PYSEC-2026-1918, RHSA-2024:6907, USN-7002-1

Charts affected

986 by stars
ChartLatestAffected imagesRadar Score
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
python-pip@20.0.2-5ubuntu1.6
python-setuptools@44.0.0-2
setuptools@45.2.0-1
setuptools@60.5.0
20.0.2-5ubuntu1.10+esm2
44.0.0-2ubuntu0.1+esm1
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

17,836
opendistro-eslsst-sqre1.4.11 of 3See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.4.06df71eb04639
setuptools@0.9.8
70.0.0

Open the chart page →

7,931
sasquatchlsst-sqre0.1.132 of 6See more

sasquatch lsst-sqre 0.1.13

2 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lsstsqre/kafkaconnect:0.9.34143c7cd705e
setuptools@57.5.0
70.0.0
lsstsqre/strimzi-registry-operator:0.4.1e139fde946d7
setuptools@57.5.0
70.0.0

Open the chart page →

9,332
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lsstsqre/squash-api:0.5.34879415ec6ac
setuptools@51.0.0
70.0.0

Open the chart page →

6,623
kube-hunterm9sweeperVerified publisher1.6.01 of 1See more

kube-hunter m9sweeper 1.6.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
aquasec/kube-hunter:0.6.8e64fe49f059f
setuptools@57.5.0
70.0.0

Open the chart page →

997
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
setuptools@65.5.1
70.0.0

Open the chart page →

6,722
novosgamarcusrepo0.1.11 of 2See more

novosga marcusrepo 0.1.1

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
70.0.0

Open the chart page →

3,707
webapp-colormarcusrepo0.1.11 of 1See more

webapp-color marcusrepo 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kodekloud/webapp-color:latest99c3821ea49b
setuptools@40.4.3
70.0.0

Open the chart page →

911
meerschaummeerschaumVerified publisher0.2.01 of 1See more

meerschaum meerschaum 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
bmeares/meerschaum:2.8.48e9c5bacaa82
setuptools@65.5.1
70.0.0

Open the chart page →

5,849
nfs-server-provisionermesosphere0.6.11 of 1See more

nfs-server-provisioner mesosphere 0.6.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
setuptools@40.8.0
70.0.0

Open the chart page →

2,806
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.3.065095a82d4a1
setuptools@50.3.2
70.0.0

Open the chart page →

68,330
pritunlmglants0.1.01 of 1See more

pritunl mglants 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
goofball222/pritunl:1.30.3070.5943c0743701d4
setuptools@52.0.0
70.0.0

Open the chart page →

1,902
activemqmicroboxlabs3.8.01 of 1See more

activemq microboxlabs 3.8.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
alfresco/alfresco-activemq:5.18.7-jre17-rockylinux85472f88d9b0b
setuptools@39.2.0
70.0.0

Open the chart page →

1,501
middleware-odigosmiddleware-labsVerified publisher0.2.411 of 6See more

middleware-odigos middleware-labs 0.2.41

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/odigos-odiglet:middleware-test-0.0.103c8c835ecee
setuptools@67.4.0
70.0.0

Open the chart page →

8,370
middleware-visionmiddleware-labsVerified publisher0.2.651 of 6See more

middleware-vision middleware-labs 0.2.65

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/vision-odiglet:middleware-test-0.0.3bce34c98668e
setuptools@67.6.0
70.0.0

Open the chart page →

8,361
alluremidokura-communityVerified publisher0.1.31 of 2See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
python-pip@9.0.1-2.3~ubuntu1.18.04.5
setuptools@47.1.1
9.0.1-2.3~ubuntu1.18.04.8+esm4
70.0.0

Open the chart page →

12,862
errbotmidokura-communityVerified publisher0.0.51 of 1See more

errbot midokura-community 0.0.5

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
errbotio/errbot:6.1.900ee4e0953ab
setuptools@60.5.0
70.0.0

Open the chart page →

2,233
fossologymidokura-communityVerified publisher0.2.21 of 2See more

fossology midokura-community 0.2.2

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
fossology/fossology:4.2.18bd1f22ba7bb
setuptools@65.5.1
70.0.0

Open the chart page →

3,294
saltmidokura-communityVerified publisher0.0.31 of 1See more

salt midokura-community 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
saltstack/salt:3006.3e9c7906b7a5c
setuptools@58.1.0
70.0.0

Open the chart page →

896
python-api-postgresmiltex0.0.11 of 2See more

python-api-postgres miltex 0.0.1

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
miltex/python-api:1.0.0dab12a7748d5
setuptools@44.0.0
70.0.0

Open the chart page →

2,347
pulsarv2milvus-helm2.7.82 of 4See more

pulsarv2 milvus-helm 2.7.8

2 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
setuptools@40.6.3.post20190116
70.0.0
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
setuptools@41.1.0
70.0.0

Open the chart page →

15,855
buildkite-exporterminaVerified publisher0.1.41 of 1See more

buildkite-exporter mina 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
codaprotocol/buildkite-exporter:0.2.137c68e67a401
setuptools@52.0.0
70.0.0

Open the chart page →

2,599
o1-botminaVerified publisher0.0.31 of 1See more

o1-bot mina 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
codaprotocol/coda-user-agent:0.1.54ba4dd3a041f
setuptools@45.2.0
70.0.0

Open the chart page →

2,656
minio-operatorminio-operator4.3.71 of 2See more

minio-operator minio-operator 4.3.7

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

6,085
MINTmint8.0.22 of 15See more

MINT mint 8.0.2

2 of the 15 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
mintproject/data-catalog:9be70359feabe03ed55bfdbf92c20a7e43ab928b67d2f2103085
setuptools@57.5.0
70.0.0
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
setuptools@65.5.0
70.0.0

Open the chart page →

42,983
mlflow-servermlflow-server0.3.01 of 1See more

mlflow-server mlflow-server 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/mlops-for-all/mlflow-tracking-server:3.8-1.30.1-v1.0.0d30e631684c3
setuptools@57.5.0
70.0.0

Open the chart page →

3,158
cockroachdb-operatormmontesVerified publisher0.1.01 of 1See more

cockroachdb-operator mmontes 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
cockroachdb/cockroach-operator:v2.1.0983312754620
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-6.el8_4.1
70.0.0

Open the chart page →

7,775
pritunl-vpnmoinologics0.0.11 of 1See more

pritunl-vpn moinologics 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
goofball222/pritunl:1.32.3602.807bf26032dfce
setuptools@59.4.0
70.0.0

Open the chart page →

2,470
mlflowmondata-helm-chartsVerified publisher0.2.31 of 1See more

mlflow mondata-helm-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
mondata/mlflow:v2.3.0.s3.gc6f94c6caf8bf
setuptools@65.5.1
70.0.0

Open the chart page →

3,811
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-backend:0.11a9ce0b8fbd4
setuptools@57.5.0
70.0.0

Open the chart page →

6,438
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
moreillon/face-recognition-fastapi:x86bacb2ddd8394
setuptools@57.5.0
70.0.0

Open the chart page →

8,556
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

25,989
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

15,731
mozalert-controllermozilla0.4.01 of 1See more

mozalert-controller mozilla 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
afrank/mozalert-controller:latestd463c37b08d7
setuptools@49.2.0
70.0.0

Open the chart page →

2,969
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
py3-setuptools@69.5.1-r0
setuptools@69.5.1
70.3.0-r0
70.0.0

Open the chart page →

4,560
mtlsmtls0.3.41 of 1See more

mtls mtls 0.3.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
drgrove/mtls-server:v0.14.2361721759a2b
setuptools@41.0.1
70.0.0

Open the chart page →

1,458
mum-discord-botmum-discord-botVerified publisher0.3.71 of 1See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
setuptools@65.5.1
70.0.0

Open the chart page →

13,711
my-app-namemy-app-name0.0.21 of 1See more

my-app-name my-app-name 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

9,149
my-fastapi-chartmy-fastapi-template0.1.01 of 1See more

my-fastapi-chart my-fastapi-template 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
john19968010/fastapi-template:latest31a90f6bd69c
setuptools@65.5.1
70.0.0

Open the chart page →

967
testwebappmy-helm-chartsVerified publisher0.1.11 of 1See more

testwebapp my-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
forchaladtest/testwebapp:0.15909cf64ef53
setuptools@44.1.0
70.0.0

Open the chart page →

1,166
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

27,812
phonebook-chartmy-phonebook-chart0.1.03 of 3See more

phonebook-chart my-phonebook-chart 0.1.0

3 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ahmetgrbzz/result_server:1.008e10f9c0f53
setuptools@69.2.0
70.0.0
ahmetgrbzz/web_server:1.02e7fef69c29f
setuptools@69.2.0
70.0.0
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
70.0.0

Open the chart page →

3,032
betydbncsaVerified publisher0.6.11 of 4See more

betydb ncsa 0.6.1

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ncsa/checks:1.0.1cc46a03e16ed
setuptools@57.5.0
70.0.0

Open the chart page →

9,542
datawolfncsaVerified publisher1.1.01 of 3See more

datawolf ncsa 1.1.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ncsa/checks:1.0.1cc46a03e16ed
setuptools@57.5.0
70.0.0

Open the chart page →

4,989
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
elastichq/elasticsearch-hq:latestbb3bd22c2b87
setuptools@40.7.1
70.0.0

Open the chart page →

4,913
incorencsaVerified publisher1.38.02 of 29See more

incore ncsa 1.38.0

2 of the 29 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ncsa/checks:1.0.0abf6300b57b7
setuptools@49.2.1
70.0.0
ncsa/checks:1.0.1cc46a03e16ed
setuptools@57.5.0
70.0.0

Open the chart page →

15,408
mlflowncsaVerified publisher1.2.11 of 4See more

mlflow ncsa 1.2.1

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
evk02/mlflow:2.2.1ef6ff257ef35
setuptools@57.5.0
70.0.0

Open the chart page →

5,456
pecanncsaVerified publisher0.6.22 of 15See more

pecan ncsa 0.6.2

2 of the 15 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ncsa/checks:1.0.1cc46a03e16ed
setuptools@57.5.0
70.0.0
pecan/monitor:1.7.273b2074f3fec
setuptools@50.3.0
70.0.0

Open the chart page →

14,154
polyglotncsaVerified publisher0.1.12 of 18See more

polyglot ncsa 0.1.1

2 of the 18 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
setuptools@50.3.0
70.0.0
ncsa/checks:1.0.0abf6300b57b7
setuptools@49.2.1
70.0.0

Open the chart page →

55,715
smilencsaVerified publisher1.1.016 of 23See more

smile ncsa 1.1.0

16 of the 23 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
socialmediamacroscope/autophrase:0.1.570fb11d4f531
python-pip@20.0.2-5ubuntu1.9
setuptools@45.2.0-1ubuntu0.1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0
socialmediamacroscope/classification_predict:0.1.24fb86885d64d
setuptools@57.5.0
70.0.0
socialmediamacroscope/classification_split:0.1.24bfda60829fe
setuptools@57.5.0
70.0.0
socialmediamacroscope/classification_train:0.1.207477060bba8
setuptools@57.5.0
70.0.0
socialmediamacroscope/clowder_create_collection:0.1.0c969f7677983
setuptools@57.5.0
70.0.0
socialmediamacroscope/clowder_create_dataset:0.1.09b4211832429
setuptools@57.5.0
70.0.0
socialmediamacroscope/clowder_create_space:0.1.0999f2ff2c128
setuptools@57.5.0
70.0.0
socialmediamacroscope/clowder_list:0.1.051cb17626519
setuptools@57.5.0
70.0.0
socialmediamacroscope/clowder_upload_file:0.1.274e35f64db68
setuptools@57.5.0
70.0.0
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
python-pip@9.0.1-2.3~ubuntu1.18.04.8
python-setuptools@39.0.1-2ubuntu0.1
setuptools@39.0.1
9.0.1-2.3~ubuntu1.18.04.8+esm4
39.0.1-2ubuntu0.1+esm1
70.0.0
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
setuptools@57.5.0
70.0.0
socialmediamacroscope/image_crawler:0.1.2f508216be63c
python-pip@9.0.1-2.3~ubuntu1.18.04.8
python-setuptools@39.0.1-2ubuntu0.1
setuptools@39.0.1
9.0.1-2.3~ubuntu1.18.04.8+esm4
39.0.1-2ubuntu0.1+esm1
70.0.0
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
setuptools@57.5.0
70.0.0
socialmediamacroscope/preprocessing:0.1.3ca863306314b
setuptools@57.5.0
70.0.0
socialmediamacroscope/screen_name_prompt:0.1.2724f3f5702e0
setuptools@57.5.0
70.0.0
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
setuptools@57.5.0
70.0.0

Open the chart page →

109,485

Container images carrying it

1,047 by charts deploying them

A fixed version is listed for 17 of the 17 affected packages.

Container imageDigestPackageFixed inUsed by
omecproject/mme-exporter:paging-latestbcc5f19fd676
python-pip@9.0.1-2.3~ubuntu1.18.04.1
python-setuptools@39.0.1-2
setuptools@39.0.1
9.0.1-2.3~ubuntu1.18.04.8+esm4
39.0.1-2ubuntu0.1+esm1
70.0.0
1
omecproject/onos-progran:1.0.05715e5648aa0
python-setuptools@20.7.0-1
20.7.0-1ubuntu0.1~esm2
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@39.0.1
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
1
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
setuptools@65.5.1
70.0.0
1
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
setuptools@65.5.1
70.0.0
1
omkara25/simple-microservice-app-user-service:v2d62cba548580
setuptools@65.5.1
70.0.0
1
opea/asr:1.025dd26d9cd09
setuptools@65.5.1
70.0.0
1
opea/chatqna:1.038c51b791efa
setuptools@65.5.1
70.0.0
1
opea/codegen:1.058f91683892d
setuptools@65.5.1
70.0.0
1
opea/codetrans:1.0e2436483b73d
setuptools@65.5.1
70.0.0
1
opea/docsum:1.03eaa91849512
setuptools@65.5.1
70.0.0
1
opea/guardrails-tgi:1.0262c6048aab8
setuptools@65.5.1
70.0.0
1
opea/guardrails-tgi:latestf68bec6a1271
setuptools@65.5.1
70.0.0
1
opea/llm-docsum-tgi:1.002f9e8fa5d71
setuptools@65.5.1
70.0.0
1
opea/speecht5:1.0249afad3d268
setuptools@65.5.1
70.0.0
1
opea/tts:1.0257ae94709e9
setuptools@65.5.1
70.0.0
1
opea/web-retriever-chroma:1.0fe08165d7770
setuptools@65.5.1
70.0.0
1
openbas/caldera-server:5.1.0a277796d9724
setuptools@66.1.1
70.0.0
1
opencsghq/csgship-agentic:v0.4.02cd29671a03e
setuptools@65.5.1
70.0.0
1
opendatacube/pipelines:wofs-1.225d810e8504b8
python-pip@9.0.1-2.3~ubuntu1
setuptools@40.6.3
9.0.1-2.3~ubuntu1.18.04.8+esm4
70.0.0
1
opendatacube/restcube:latest91870111837c
python-pip@9.0.1-2.3~ubuntu1
setuptools@40.6.3
9.0.1-2.3~ubuntu1.18.04.8+esm4
70.0.0
1
opendatacube/wms:latest1b90cdf68831
python-pip@9.0.1-2.3~ubuntu1
setuptools@40.6.3
9.0.1-2.3~ubuntu1.18.04.8+esm4
70.0.0
1
openelevation/open-elevation:latest82fb21612e86
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0
1
openemr/openemr:6.1.089eaa6d9a4e3
setuptools@52.0.0
70.0.0
1
openkm/openkm-ce:6.3.113bc465a7461b
setuptools@45.2.0-1
45.2.0-1ubuntu0.2
1
openmined/syft-seaweedfs:0.9.53a4144c0bb82
py3-setuptools@68.2.2-r0
setuptools@68.2.2
70.3.0-r0
70.0.0
1
openspeedtest/latest:v2.0.0d4d62f4b7d85
py3-setuptools@65.6.0-r0
setuptools@65.6.0
70.3.0-r0
70.0.0
1
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
setuptools@68.2.2
70.0.0
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
setuptools@54.1.1
70.0.0
1
openthread/otbr:latestf307f59f6432
python-setuptools@39.0.1-2ubuntu0.1
39.0.1-2ubuntu0.1+esm1
1
openwhisk/kafkaprovider:2.1.063dc3d2a0904
setuptools@41.4.0
70.0.0
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
python-pip@9.0.1-2.3~ubuntu1.18.04.4
python-setuptools@39.0.1-2
setuptools@44.1.1
9.0.1-2.3~ubuntu1.18.04.8+esm4
39.0.1-2ubuntu0.1+esm1
70.0.0
1
openzaak/open-notificaties:1.3.02e65313b9b10
setuptools@57.5.0
70.0.0
1
openzaak/open-zaak:1.6.02ca2ea6e0ae9
setuptools@58.5.3
70.0.0
1
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
setuptools@57.5.0
70.0.0
1
pangeo/base-notebook:2024.01.155fbe688a4f80
setuptools@69.0.3
70.0.0
1
pe46dro/xbackbone-docker:3.3.309dfe3aa10f6
setuptools@40.6.3.post20190116
70.0.0
1
pecan/monitor:1.7.273b2074f3fec
setuptools@50.3.0
70.0.0
1
perconalab/percona-toolkit:3.2.1d3eea9de152e
setuptools@39.2.0
70.0.0
1
percona/pmm-server:3.9.1003f9c25f842
setuptools@53.0.0
70.0.0
1
phan2410/dummy-service:0.0.89c6ed6de26ca
setuptools@66.1.1
70.0.0
1
phntom/email-manager:0.1.22d8e2a9f2f085
setuptools@65.5.1
70.0.0
1
phntom/external-dns-host-network:0.0.123adadbac8443
setuptools@58.1.0
70.0.0
1
phntom/postgresql-backup-s3:1.0.2249b6488f618b
py3-setuptools@65.6.0-r0
setuptools@65.6.0
70.3.0-r0
70.0.0
1
phntom/stocks-nasdaq-crawler:0.0.28d2b844700b57
setuptools@50.3.0
70.0.0
1
photoprism/photoprism:240711-cefc6fd632ca74
setuptools@68.1.2-2ubuntu1
setuptools@68.1.2
68.1.2-2ubuntu1.1
70.0.0
1
phsmith/rundeck-exporter:2.6.10265a7616ae8
setuptools@65.5.1
70.0.0
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
python-setuptools@39.2.0-5.el8
setuptools@46.0.0
0:39.2.0-8.el8_10
70.0.0
1
pnnlmiscscripts/ipmi-exporter:1.2.0-181e18992d8e3
setuptools@39.2.0
python-setuptools@39.2.0-7.el8
70.0.0
0:39.2.0-8.el8_10
1
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-3.el8_8
python-setuptools@39.2.0-7.el8
python-urllib3@1.24.2-5.el8
python39@3.9.16-1.module+el8.8.0+18968+3d7b19f0.1
python3x-setuptools@50.3.2-4.module+el8.5.0+12204+54860423
setuptools@68.2.2
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-7.el8_8.1
0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
0:3.9.16-1.module+el8.8.0+20025+f2100191.2
0:50.3.2-6.module+el8.8.0+22158+89b6fb7b
70.0.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.