CVE-2024-6345

High

Advisory

Published 15 Jul 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.8; base score, highest
EPSS: 0.019; 79th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 978; of 17,781 indexed, latest versions
Container images: 1,039; deployed by those charts
Fix available: 17 of 17; affected packages

setuptools vulnerable to Command Injection via package URL

Carried by container images the latest versions of 978 of 17,781 indexed charts deploy, on 1,039 images.

Affected package	Affected versions	Fixed in	Images
setuptoolspypi	0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+103 more	70.0.0	989
python-setuptoolsrpm	0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+3 more	0:0.9.8-7.el7_9.1, 0:39.2.0-6.el8_4.1, 0:39.2.0-7.el8_6.1, 0:39.2.0-7.el8_8.1+3 more	115
setuptoolsdeb	45.2.0-1, 45.2.0-1ubuntu0.1, 59.6.0-1.2, 59.6.0-1.2ubuntu0.22.04.1+2 more	45.2.0-1ubuntu0.2, 59.6.0-1.2ubuntu0.22.04.2, 66.1.1-1+deb12u1, 68.1.2-2ubuntu1.1	101
python-pipdeb	1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+11 more	1.5.4-1ubuntu4+esm5, 8.1.1-2ubuntu0.6+esm8, 9.0.1-2.3~ubuntu1.18.04.8+esm4, 20.0.2-5ubuntu1.10+esm2	60
python-setuptoolsdeb	3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more	3.3-1ubuntu2+esm2, 20.7.0-1ubuntu0.1~esm2, 39.0.1-2ubuntu0.1+esm1, 44.0.0-2ubuntu0.1+esm1	39
py3-setuptoolsapk	65.6.0-r0, 67.7.2-r0, 68.2.2-r0, 69.5.1-r0	70.3.0-r0	21
python-chardetrpm	3.0.4-7.el8	0:3.0.4-19.module+el8.4.0+9822+20bf1249	20
python-idnarpm	2.5-5.el8	0:2.10-3.module+el8.4.0+9822+20bf1249	20
python-pysocksrpm	1.6.8-3.el8	0:1.7.1-4.module+el8.4.0+9822+20bf1249	20
python-requestsrpm	2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8	0:2.25.0-2.module+el8.4.0+9822+20bf1249	20
python-urllib3rpm	1.24.2-5.el8, 1.24.2-5.el8_6.1	0:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1	20
python3x-setuptoolsrpm	41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+54860423	0:50.3.2-3.module+el8.4.0+22168+8a561f05.2, 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b	9
python-plyrpm	3.9-9.el8	0:3.11-10.module+el8.4.0+9822+20bf1249	7
python39rpm	3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.1	0:3.9.2-2.module+el8.4.0+20027+45e0e702.2, 0:3.9.16-1.module+el8.8.0+20025+f2100191.2	6
python3x-piprpm	19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf1249	0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c488	4
python3.11-setuptoolsrpm	65.5.1-2.el9	0:65.5.1-2.el9_4.1	1
python-wheelrpm	0.33.6-5.module+el8.4.0+8888+89bc7e79	1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1	1

OSV records: ALPINE-CVE-2024-6345 DEBIAN-CVE-2024-6345 GHSA-cx63-2mw6-8hw5 RHSA-2024:5000 RHSA-2024:5040 RHSA-2024:5078 RHSA-2024:5084 RHSA-2024:5137 RHSA-2024:5279 RHSA-2024:5530 RHSA-2024:5534 RHSA-2024:6220 RHSA-2024:6488 RHSA-2024:6662 UBUNTU-CVE-2024-6345 RLSA-2024:5530
Also known as: BIT-setuptools-2024-6345, PYSEC-2026-1918, RHSA-2024:6907, USN-7002-1

Charts affected

978 by stars

Chart

Latest

Affected images

Radar Score

fadicetic

0.3.1

4 of 25 See more

fadi cetic 0.3.1

4 of the 25 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
amancevice/superset :0.35.2	12a0a9e66550	setuptools@44.0.0	70.0.0
ceticasbl/pg-ldap-sync :latest	6c0aa7567145	setuptools@40.8.0	70.0.0
jupyterhub/k8s-hub :0.11.1	b6b4a1a34bf0	python-pip@20.0.2-5ubuntu1.1 setuptools@45.2.0-1 setuptools@51.1.2	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0
jupyterhub/k8s-singleuser-sample :0.11.1	e3e6f3051df8	setuptools@49.6.0.post20201009	70.0.0

Open the chart page →

52,919

daskhubdask

2024.1.1

3 of 9 See more

daskhub dask 2024.1.1

3 of the 9 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
pangeo/base-notebook :2024.01.15	5fbe688a4f80	setuptools@69.0.3	70.0.0
ghcr.io/dask/dask-gateway-server :2024.1.0	881e7acfc5a0	setuptools@65.5.1	70.0.0
quay.io/jupyterhub/k8s-hub :3.2.1	2528c6e57587	setuptools@65.5.1	70.0.0

Open the chart page →

14,094

seafiledatamate

0.6.0

1 of 6 See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
datamate/seafile-professional :11.0.20	2dd66b722464	setuptools@59.6.0	70.0.0

Open the chart page →

27,267

geonode-k8sgeonode-k8s

2.0.0

2 of 10 See more

geonode-k8s geonode-k8s 2.0.0

2 of the 10 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
geonode/geoserver :2.28.4-latest	81b1d431b7e9	setuptools@59.6.0	70.0.0
geopython/pycsw :3.0.0-beta2	84662ea6b78b	setuptools@66.1.1	70.0.0

Open the chart page →

13,953

karakeephelmforge

1.2.9

1 of 3 See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/browserless/chromium :v2.55.4	2ed0183564d7	setuptools@68.1.2	70.0.0

Open the chart page →

9,460

netbird-dashboardjaconi

1.2.1

1 of 1 See more

netbird-dashboard jaconi 1.2.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
netbirdio/dashboard :v2.90.2	332cc31f5f35	setuptools@52.0.0	70.0.0

Open the chart page →

585

keycloak-operatorkeycloak-operator

0.0.4

1 of 1 See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :20.0.2	b1710745fa64	python-setuptools@39.2.0-6.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0

Open the chart page →

4,652

percona-xtradb-clusterkfirfer

1.5.10

1 of 3 See more

percona-xtradb-cluster kfirfer 1.5.10

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
kfirfer/percona-xtradb-healthcheck :0.0.1	ef7b909a8e6b	setuptools@50.3.2	70.0.0

Open the chart page →

4,957

kubeflowkubeflow

1.6.2

6 of 45 See more

kubeflow kubeflow 1.6.2

6 of the 45 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
kserve/models-web-app :v0.8.0	63ea05e73842	setuptools@57.5.0	70.0.0
kubeflownotebookswg/jupyter-web-app :v1.6.1	d762690e21c1	setuptools@57.5.0	70.0.0
kubeflownotebookswg/tensorboards-web-app :v1.6.1	0876fef1973b	setuptools@57.5.0	70.0.0
kubeflownotebookswg/volumes-web-app :v1.6.1	7299fa94db15	setuptools@57.5.0	70.0.0
library/python :3.7	eedf63967cdb	setuptools@57.5.0	70.0.0
gcr.io/ml-pipeline/metadata-writer :2.0.0-alpha.5	ec3ae9f6df47	setuptools@57.5.0	70.0.0

Open the chart page →

96,941

pypiserverowkin

3.1.1

1 of 1 See more

pypiserver owkin 3.1.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
pypiserver/pypiserver :v1.3.2	303ac89b2aa2	setuptools@44.0.0	70.0.0

Open the chart page →

506

clustersecretpatrungel

0.2.0

1 of 1 See more

clustersecret patrungel 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
flag5/clustersecret :0.0.9	4ad5748bfcc6	setuptools@57.5.0	70.0.0

Open the chart page →

1,841

taigarc-helm-charts

0.1.0

2 of 7 See more

taiga rc-helm-charts 0.1.0

2 of the 7 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
taigaio/taiga-back :6.4.2	9f97323cc150	setuptools@57.5.0	70.0.0
taigaio/taiga-protected :6.4.0	36318831b3e7	setuptools@47.1.0	70.0.0

Open the chart page →

7,255

openspeedtestspeedtest

0.1.2

1 of 1 See more

openspeedtest speedtest 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
openspeedtest/latest :v2.0.0	d4d62f4b7d85	py3-setuptools@65.6.0-r0 setuptools@65.6.0	70.3.0-r0 70.0.0

Open the chart page →

2,040

netboxstartechnica

5.1.0

1 of 4 See more

netbox startechnica 5.1.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
netboxcommunity/netbox :v3.7.8-2.8.0	9bf83b350a89	setuptools@69.5.1	70.0.0

Open the chart page →

1,650

k8s-telegram-sendertelegram-sender

0.0.1

1 of 1 See more

k8s-telegram-sender telegram-sender 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
danuk/telegram-sender :0.0.1	026560388070	setuptools@58.1.0	70.0.0

Open the chart page →

3,048

grafana-pdf-exporterwiremind

2.1.1

1 of 1 See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	setuptools@66.1.1-1	66.1.1-1+deb12u1

Open the chart page →

9,746

alerta-webalerta-web

0.1.12

1 of 2 See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
hayk96/alerta-web :9.0.4	86377705e9e3	setuptools@58.1.0	70.0.0

Open the chart page →

3,569

aws-ecr-credentialarchitectminds

1.4.2

1 of 1 See more

aws-ecr-credential architectminds 1.4.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
architectminds/aws-kubectl :1.1	9735e59a1085	setuptools@41.0.1	70.0.0

Open the chart page →

1,437

openshift-consoleav1o-charts

0.3.6

1 of 1 See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	python-setuptools@39.2.0-5.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0

Open the chart page →

9,052

backup-zenbzen

0.1.4

1 of 1 See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
rezachalak/bzen-mongo :1.0.0	34f694325191	python-pip@20.0.2-5ubuntu1.9 setuptools@45.2.0-1ubuntu0.1 setuptools@45.2.0	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0

Open the chart page →

7,960

cmak-operatorcmak-operator

2.2.2

1 of 3 See more

cmak-operator cmak-operator 2.2.2

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/eshepelyuk/dckr/cmak2zk :1.2.0	22de6314c31e	setuptools@57.5.0	70.0.0

Open the chart page →

4,605

coder-observabilitycoder-observability

0.7.3

1 of 21 See more

coder-observability coder-observability 0.7.3

1 of the 21 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
kiwigrid/k8s-sidecar :1.24.3	5af76eebbba7	setuptools@65.5.1	70.0.0

Open the chart page →

24,700

codetogethercodetogether

1.4.25

1 of 1 See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
codetogether/codetogether :latest	4348c8a38752	python-setuptools@53.0.0-12.el9	0:53.0.0-12.el9_4.1

Open the chart page →

7,450

convertigoconvertigo

8.4.3

1 of 5 See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
baserow/baserow :1.30.1	df0c42eb67e8	setuptools@66.1.1-1 setuptools@66.1.1	66.1.1-1+deb12u1 70.0.0

Open the chart page →

17,404

cachetdeliveryhero

1.3.5

1 of 2 See more

cachet deliveryhero 1.3.5

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
cachethq/docker :2.3.15	a61ff0f67ea7	setuptools@33.1.1.post20171031	70.0.0

Open the chart page →

1,896

zabbix-kubernetes-discoverydjerfy

1.4.20

1 of 1 See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery :v1.4.20	7a50c07e7c69	setuptools@68.1.2	70.0.0

Open the chart page →

4,147

ecr-proxyevryfs-oss

0.2.9

1 of 1 See more

ecr-proxy evryfs-oss 0.2.9

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
esailors/aws-ecr-http-proxy :1.5.1	5608ae045fa7	setuptools@52.0.0	70.0.0

Open the chart page →

1,523

openshift-secured-appeximiait

0.5.0

1 of 1 See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:3.11-10.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-7.el8_6.1 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 70.0.0

Open the chart page →

12,042

openshift-secured-pgadmineximiait

0.2.0

2 of 2 See more

openshift-secured-pgadmin eximiait 0.2.0

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
dpage/pgadmin4 :7.5	37946e4f3e7b	py3-setuptools@67.7.2-r0 setuptools@67.7.2	70.3.0-r0 70.0.0
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:3.11-10.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-7.el8_6.1 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 70.0.0

Open the chart page →

14,546

openshift-secured-redisInsighteximiait

0.9.2

2 of 2 See more

openshift-secured-redisInsight eximiait 0.9.2

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
redislabs/redisinsight :1.14.0	b03ab1426d0d	setuptools@63.2.0	70.0.0
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:3.11-10.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-7.el8_6.1 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 70.0.0

Open the chart page →

13,874

deconzgeek-cookbook

6.5.2

1 of 1 See more

deconz geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
deconzcommunity/deconz :2.12.06	6541bbb78952	setuptools@40.8.0	70.0.0

Open the chart page →

3,555

esphomegeek-cookbook

8.4.2

1 of 1 See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
esphome/esphome :1.18.0	3f51ec10e823	setuptools@40.8.0	70.0.0

Open the chart page →

3,717

frigategeek-cookbook

8.2.2

1 of 1 See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	python-pip@20.0.2-5ubuntu1.6 setuptools@45.2.0-1 setuptools@45.2.0	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0

Open the chart page →

10,598

mealiegeek-cookbook

5.1.2

1 of 2 See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
hkotel/mealie :api-v1.0.0beta-2	a7e6b6abe087	setuptools@58.1.0	70.0.0

Open the chart page →

7,579

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	setuptools@45.2.0-1	45.2.0-1ubuntu0.2

Open the chart page →

10,154

tautulligeek-cookbook

11.4.2

1 of 1 See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	setuptools@45.2.0-1 setuptools@45.2.0	45.2.0-1ubuntu0.2 70.0.0

Open the chart page →

10,628

mlflowgetindata

0.1.2

1 of 1 See more

mlflow getindata 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
gcr.io/getindata-images-public/mlflow :latest	25d6975951f1	setuptools@65.5.1	70.0.0

Open the chart page →

2,452

nzbhydra2halkeye

2.30.1

1 of 2 See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
binhex/arch-nzbhydra2 :3.1.0-1-01	fb8952921ab6	setuptools@49.6.0	70.0.0

Open the chart page →

6,711

netbirdhelmforge

1.0.10

1 of 4 See more

netbird helmforge 1.0.10

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
netbirdio/dashboard :v2.90.10	1b59e1c905c9	setuptools@52.0.0	70.0.0

Open the chart page →

2,962

cratedbhmdmph

2.0.3

1 of 2 See more

cratedb hmdmph 2.0.3

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
library/crate :4.7.0	c7984a05e15b	setuptools@39.2.0	70.0.0

Open the chart page →

1,335

redis-pod-labelerhmdmph

1.0.2

1 of 1 See more

redis-pod-labeler hmdmph 1.0.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
hmdmph/redis-pod-labeler :1.0.0-alpine	7f1381fe0f3b	setuptools@47.1.1	70.0.0

Open the chart page →

2,985

mysql-clusterkfirfer

0.0.4

1 of 1 See more

mysql-cluster kfirfer 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
mysql/mysql-cluster :8.0.20	e4ea36622cdd	setuptools@40.8.0	70.0.0

Open the chart page →

416

kiali-operatorkiali

2.31.0

1 of 1 See more

kiali-operator kiali 2.31.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/kiali/kiali-operator :v2.31.0	f837d8f25545	setuptools@53.0.0	70.0.0

Open the chart page →

1,157

kubeviouskubevious

1.2.2

1 of 7 See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
redislabs/redisearch :2.4.14	33561794c5c8	setuptools@63.4.2	70.0.0

Open the chart page →

14,204

kubeservice-lxcfs-webhookkubservice-charts

1.6.0

1 of 6 See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
dongjiang1989/lxcfs :v6.0.3	4bf9ae391948	setuptools@45.2.0	70.0.0

Open the chart page →

11,582

memgraph-high-availabilitymemgraph

1.4.0

1 of 2 See more

memgraph-high-availability memgraph 1.4.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
memgraph/memgraph :3.13.0	a1dc375774ed	setuptools@68.1.2	70.0.0

Open the chart page →

1,373

flagsmithone-acre-fund

0.1.5

2 of 6 See more

flagsmith one-acre-fund 0.1.5

2 of the 6 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
blacktop/httpie :latest	fc5e68e2f5ab	setuptools@40.6.2	70.0.0
flagsmith/flagsmith-api :v2.6.0	fd58556339a4	setuptools@54.2.0	70.0.0

Open the chart page →

6,868

kobotoolboxone-acre-fund

0.7.4

2 of 9 See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
kobotoolbox/kobocat :2.022.24a	b15679454415	setuptools@63.2.0	70.0.0
kobotoolbox/kpi :2.022.24d	bcacc01bccd4	setuptools@63.2.0	70.0.0

Open the chart page →

18,517

open-zaakopen-zaak

0.8.0

1 of 3 See more

open-zaak open-zaak 0.8.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
openzaak/open-zaak :1.6.0	2ca2ea6e0ae9	setuptools@58.5.3	70.0.0

Open the chart page →

4,045

oesopsmx

4.0.32

8 of 25 See more

oes opsmx 4.0.32

8 of the 25 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/opsmxpublic/awsgit :v2-openssh	0d21ba756f44	setuptools@52.0.0	70.0.0
quay.io/opsmxpublic/awsgit :v3-js	15a6faada3d4	setuptools@52.0.0	70.0.0
quay.io/opsmxpublic/ubi8-gate :isd-spin-2025.10.01-5c720954-202511260810	2b3554029737	setuptools@39.2.0	70.0.0
quay.io/opsmxpublic/ubi8-oes-audit-client :isd-spin-2025.10.01-cb1bfce-202511261037	32a5b1887eab	setuptools@39.2.0	70.0.0
quay.io/opsmxpublic/ubi8-oes-autopilot :isd-spin-2025.10.01-af26a30d4-202511261054	58bd0bcf72f9	setuptools@39.2.0	70.0.0
quay.io/opsmxpublic/ubi8-oes-db :v3.0.0	89ee6493af89	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-6.el8_4.1 0:1.25.10-3.module+el8.4.0+9822+20bf1249 70.0.0
quay.io/opsmxpublic/ubi8-oes-platform :isd-spin-2025.10.01-a7c191ec-202511261122	8ed603ab7417	setuptools@39.2.0	70.0.0
quay.io/opsmxpublic/ubi8-oes-ui :isd-spin-2025.10.01-e6f6f01-202512100640	5d934bb66884	setuptools@39.2.0	70.0.0

Open the chart page →

107,811

Container images carrying it

1,039 by charts deploying them

A fixed version is listed for 17 of the 17 affected packages.

Container image	Digest	Package	Fixed in	Used by
omkara25/simple-microservice-app-user-service :v2	d62cba548580	setuptools@65.5.1	70.0.0	1
opea/asr :1.0	25dd26d9cd09	setuptools@65.5.1	70.0.0	1
opea/chatqna :1.0	38c51b791efa	setuptools@65.5.1	70.0.0	1
opea/codegen :1.0	58f91683892d	setuptools@65.5.1	70.0.0	1
opea/codetrans :1.0	e2436483b73d	setuptools@65.5.1	70.0.0	1
opea/docsum :1.0	3eaa91849512	setuptools@65.5.1	70.0.0	1
opea/guardrails-tgi :1.0	262c6048aab8	setuptools@65.5.1	70.0.0	1
opea/guardrails-tgi :latest	f68bec6a1271	setuptools@65.5.1	70.0.0	1
opea/llm-docsum-tgi :1.0	02f9e8fa5d71	setuptools@65.5.1	70.0.0	1
opea/speecht5 :1.0	249afad3d268	setuptools@65.5.1	70.0.0	1
opea/tts :1.0	257ae94709e9	setuptools@65.5.1	70.0.0	1
opea/web-retriever-chroma :1.0	fe08165d7770	setuptools@65.5.1	70.0.0	1
openbas/caldera-server :5.1.0	a277796d9724	setuptools@66.1.1	70.0.0	1
opencsghq/csgship-agentic :v0.4.0	2cd29671a03e	setuptools@65.5.1	70.0.0	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	python-pip@9.0.1-2.3~ubuntu1 setuptools@40.6.3	9.0.1-2.3~ubuntu1.18.04.8+esm4 70.0.0	1
opendatacube/restcube :latest	91870111837c	python-pip@9.0.1-2.3~ubuntu1 setuptools@40.6.3	9.0.1-2.3~ubuntu1.18.04.8+esm4 70.0.0	1
opendatacube/wms :latest	1b90cdf68831	python-pip@9.0.1-2.3~ubuntu1 setuptools@40.6.3	9.0.1-2.3~ubuntu1.18.04.8+esm4 70.0.0	1
openelevation/open-elevation :latest	82fb21612e86	python-pip@20.0.2-5ubuntu1.6 setuptools@45.2.0-1 setuptools@45.2.0	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0	1
openemr/openemr :6.1.0	89eaa6d9a4e3	setuptools@52.0.0	70.0.0	1
openkm/openkm-ce :6.3.11	3bc465a7461b	setuptools@45.2.0-1	45.2.0-1ubuntu0.2	1
openmined/syft-seaweedfs :0.9.5	3a4144c0bb82	py3-setuptools@68.2.2-r0 setuptools@68.2.2	70.3.0-r0 70.0.0	1
openspeedtest/latest :v2.0.0	d4d62f4b7d85	py3-setuptools@65.6.0-r0 setuptools@65.6.0	70.3.0-r0 70.0.0	1
openstackhelm/heat :wallaby-ubuntu_focal	f728510bab3c	setuptools@68.2.2	70.0.0	1
openstackhelm/keystone :wallaby-ubuntu_focal	e07d75953d2e	setuptools@54.1.1	70.0.0	1
openthread/otbr :latest	f307f59f6432	python-setuptools@39.0.1-2ubuntu0.1	39.0.1-2ubuntu0.1+esm1	1
openwhisk/kafkaprovider :2.1.0	63dc3d2a0904	setuptools@41.4.0	70.0.0	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	python-pip@9.0.1-2.3~ubuntu1.18.04.4 python-setuptools@39.0.1-2 setuptools@44.1.1	9.0.1-2.3~ubuntu1.18.04.8+esm4 39.0.1-2ubuntu0.1+esm1 70.0.0	1
openzaak/open-notificaties :1.3.0	2e65313b9b10	setuptools@57.5.0	70.0.0	1
openzaak/open-zaak :1.6.0	2ca2ea6e0ae9	setuptools@58.5.3	70.0.0	1
oxheadalpha/tezos-k8s-utils :5.3.4	d9faed45bf1c	setuptools@57.5.0	70.0.0	1
pangeo/base-notebook :2024.01.15	5fbe688a4f80	setuptools@69.0.3	70.0.0	1
pe46dro/xbackbone-docker :3.3.3	09dfe3aa10f6	setuptools@40.6.3.post20190116	70.0.0	1
pecan/monitor :1.7.2	73b2074f3fec	setuptools@50.3.0	70.0.0	1
perconalab/percona-toolkit :3.2.1	d3eea9de152e	setuptools@39.2.0	70.0.0	1
percona/pmm-server :3.9.1	003f9c25f842	setuptools@53.0.0	70.0.0	1
phan2410/dummy-service :0.0.8	9c6ed6de26ca	setuptools@66.1.1	70.0.0	1
phntom/email-manager :0.1.22	d8e2a9f2f085	setuptools@65.5.1	70.0.0	1
phntom/external-dns-host-network :0.0.12	3adadbac8443	setuptools@58.1.0	70.0.0	1
phntom/postgresql-backup-s3 :1.0.22	49b6488f618b	py3-setuptools@65.6.0-r0 setuptools@65.6.0	70.3.0-r0 70.0.0	1
phntom/stocks-nasdaq-crawler :0.0.28	d2b844700b57	setuptools@50.3.0	70.0.0	1
photoprism/photoprism :240711-ce	fc6fd632ca74	setuptools@68.1.2-2ubuntu1 setuptools@68.1.2	68.1.2-2ubuntu1.1 70.0.0	1
phsmith/rundeck-exporter :2.6.1	0265a7616ae8	setuptools@65.5.1	70.0.0	1
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	python-setuptools@39.2.0-5.el8 setuptools@46.0.0	0:39.2.0-8.el8_10 70.0.0	1
pnnlmiscscripts/ipmi-exporter :1.2.0-1	81e18992d8e3	setuptools@39.2.0 python-setuptools@39.2.0-7.el8	70.0.0 0:39.2.0-8.el8_10	1
pnnlmiscscripts/tenant-namespace-operator :0.1.24-1	8af4b7551d40	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-setuptools@39.2.0-7.el8 python-urllib3@1.24.2-5.el8 python39@3.9.16-1.module+el8.8.0+18968+3d7b19f0.1 python3x-setuptools@50.3.2-4.module+el8.5.0+12204+54860423 setuptools@68.2.2	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-7.el8_8.1 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 0:3.9.16-1.module+el8.8.0+20025+f2100191.2 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b 70.0.0	1
pococze/python-hello-elos :2.0.0	7a1aab425e51	setuptools@58.1.0	70.0.0	1
prefecthq/prefect :2.20.4-python3.10	1df4b5b6238a	setuptools@65.5.1	70.0.0	1
project2team4/react :latest	3ff031a08887	setuptools@45.2.0-1	45.2.0-1ubuntu0.2	1
prompve/prometheus-pve-exporter :3.4.2	fcf041f0c24d	py3-setuptools@68.2.2-r0 setuptools@65.5.0	70.3.0-r0 70.0.0	1
prompve/prometheus-pve-exporter :2.0.1	ff6749eb03b0	setuptools@47.0.0	70.0.0	1