CVE-2024-6345

High

Advisory

Published 15 Jul 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.8; base score, highest
EPSS: 0.019; 79th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 978; of 17,781 indexed, latest versions
Container images: 1,039; deployed by those charts
Fix available: 17 of 17; affected packages

setuptools vulnerable to Command Injection via package URL

Carried by container images the latest versions of 978 of 17,781 indexed charts deploy, on 1,039 images.

Affected package	Affected versions	Fixed in	Images
setuptoolspypi	0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+103 more	70.0.0	989
python-setuptoolsrpm	0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+3 more	0:0.9.8-7.el7_9.1, 0:39.2.0-6.el8_4.1, 0:39.2.0-7.el8_6.1, 0:39.2.0-7.el8_8.1+3 more	115
setuptoolsdeb	45.2.0-1, 45.2.0-1ubuntu0.1, 59.6.0-1.2, 59.6.0-1.2ubuntu0.22.04.1+2 more	45.2.0-1ubuntu0.2, 59.6.0-1.2ubuntu0.22.04.2, 66.1.1-1+deb12u1, 68.1.2-2ubuntu1.1	101
python-pipdeb	1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+11 more	1.5.4-1ubuntu4+esm5, 8.1.1-2ubuntu0.6+esm8, 9.0.1-2.3~ubuntu1.18.04.8+esm4, 20.0.2-5ubuntu1.10+esm2	60
python-setuptoolsdeb	3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more	3.3-1ubuntu2+esm2, 20.7.0-1ubuntu0.1~esm2, 39.0.1-2ubuntu0.1+esm1, 44.0.0-2ubuntu0.1+esm1	39
py3-setuptoolsapk	65.6.0-r0, 67.7.2-r0, 68.2.2-r0, 69.5.1-r0	70.3.0-r0	21
python-chardetrpm	3.0.4-7.el8	0:3.0.4-19.module+el8.4.0+9822+20bf1249	20
python-idnarpm	2.5-5.el8	0:2.10-3.module+el8.4.0+9822+20bf1249	20
python-pysocksrpm	1.6.8-3.el8	0:1.7.1-4.module+el8.4.0+9822+20bf1249	20
python-requestsrpm	2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8	0:2.25.0-2.module+el8.4.0+9822+20bf1249	20
python-urllib3rpm	1.24.2-5.el8, 1.24.2-5.el8_6.1	0:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1	20
python3x-setuptoolsrpm	41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+54860423	0:50.3.2-3.module+el8.4.0+22168+8a561f05.2, 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b	9
python-plyrpm	3.9-9.el8	0:3.11-10.module+el8.4.0+9822+20bf1249	7
python39rpm	3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.1	0:3.9.2-2.module+el8.4.0+20027+45e0e702.2, 0:3.9.16-1.module+el8.8.0+20025+f2100191.2	6
python3x-piprpm	19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf1249	0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c488	4
python3.11-setuptoolsrpm	65.5.1-2.el9	0:65.5.1-2.el9_4.1	1
python-wheelrpm	0.33.6-5.module+el8.4.0+8888+89bc7e79	1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1	1

OSV records: ALPINE-CVE-2024-6345 DEBIAN-CVE-2024-6345 GHSA-cx63-2mw6-8hw5 RHSA-2024:5000 RHSA-2024:5040 RHSA-2024:5078 RHSA-2024:5084 RHSA-2024:5137 RHSA-2024:5279 RHSA-2024:5530 RHSA-2024:5534 RHSA-2024:6220 RHSA-2024:6488 RHSA-2024:6662 UBUNTU-CVE-2024-6345 RLSA-2024:5530
Also known as: BIT-setuptools-2024-6345, PYSEC-2026-1918, RHSA-2024:6907, USN-7002-1

Charts affected

978 by stars

Chart

Latest

Affected images

Radar Score

fadicetic

0.3.1

4 of 25 See more

fadi cetic 0.3.1

4 of the 25 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
amancevice/superset :0.35.2	12a0a9e66550	setuptools@44.0.0	70.0.0
ceticasbl/pg-ldap-sync :latest	6c0aa7567145	setuptools@40.8.0	70.0.0
jupyterhub/k8s-hub :0.11.1	b6b4a1a34bf0	python-pip@20.0.2-5ubuntu1.1 setuptools@45.2.0-1 setuptools@51.1.2	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0
jupyterhub/k8s-singleuser-sample :0.11.1	e3e6f3051df8	setuptools@49.6.0.post20201009	70.0.0

Open the chart page →

52,919

daskhubdask

2024.1.1

3 of 9 See more

daskhub dask 2024.1.1

3 of the 9 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
pangeo/base-notebook :2024.01.15	5fbe688a4f80	setuptools@69.0.3	70.0.0
ghcr.io/dask/dask-gateway-server :2024.1.0	881e7acfc5a0	setuptools@65.5.1	70.0.0
quay.io/jupyterhub/k8s-hub :3.2.1	2528c6e57587	setuptools@65.5.1	70.0.0

Open the chart page →

14,094

seafiledatamate

0.6.0

1 of 6 See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
datamate/seafile-professional :11.0.20	2dd66b722464	setuptools@59.6.0	70.0.0

Open the chart page →

27,267

geonode-k8sgeonode-k8s

2.0.0

2 of 10 See more

geonode-k8s geonode-k8s 2.0.0

2 of the 10 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
geonode/geoserver :2.28.4-latest	81b1d431b7e9	setuptools@59.6.0	70.0.0
geopython/pycsw :3.0.0-beta2	84662ea6b78b	setuptools@66.1.1	70.0.0

Open the chart page →

13,953

karakeephelmforge

1.2.9

1 of 3 See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/browserless/chromium :v2.55.4	2ed0183564d7	setuptools@68.1.2	70.0.0

Open the chart page →

9,460

netbird-dashboardjaconi

1.2.1

1 of 1 See more

netbird-dashboard jaconi 1.2.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
netbirdio/dashboard :v2.90.2	332cc31f5f35	setuptools@52.0.0	70.0.0

Open the chart page →

585

keycloak-operatorkeycloak-operator

0.0.4

1 of 1 See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :20.0.2	b1710745fa64	python-setuptools@39.2.0-6.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0

Open the chart page →

4,652

percona-xtradb-clusterkfirfer

1.5.10

1 of 3 See more

percona-xtradb-cluster kfirfer 1.5.10

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
kfirfer/percona-xtradb-healthcheck :0.0.1	ef7b909a8e6b	setuptools@50.3.2	70.0.0

Open the chart page →

4,957

kubeflowkubeflow

1.6.2

6 of 45 See more

kubeflow kubeflow 1.6.2

6 of the 45 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
kserve/models-web-app :v0.8.0	63ea05e73842	setuptools@57.5.0	70.0.0
kubeflownotebookswg/jupyter-web-app :v1.6.1	d762690e21c1	setuptools@57.5.0	70.0.0
kubeflownotebookswg/tensorboards-web-app :v1.6.1	0876fef1973b	setuptools@57.5.0	70.0.0
kubeflownotebookswg/volumes-web-app :v1.6.1	7299fa94db15	setuptools@57.5.0	70.0.0
library/python :3.7	eedf63967cdb	setuptools@57.5.0	70.0.0
gcr.io/ml-pipeline/metadata-writer :2.0.0-alpha.5	ec3ae9f6df47	setuptools@57.5.0	70.0.0

Open the chart page →

96,941

pypiserverowkin

3.1.1

1 of 1 See more

pypiserver owkin 3.1.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
pypiserver/pypiserver :v1.3.2	303ac89b2aa2	setuptools@44.0.0	70.0.0

Open the chart page →

506

clustersecretpatrungel

0.2.0

1 of 1 See more

clustersecret patrungel 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
flag5/clustersecret :0.0.9	4ad5748bfcc6	setuptools@57.5.0	70.0.0

Open the chart page →

1,841

taigarc-helm-charts

0.1.0

2 of 7 See more

taiga rc-helm-charts 0.1.0

2 of the 7 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
taigaio/taiga-back :6.4.2	9f97323cc150	setuptools@57.5.0	70.0.0
taigaio/taiga-protected :6.4.0	36318831b3e7	setuptools@47.1.0	70.0.0

Open the chart page →

7,255

openspeedtestspeedtest

0.1.2

1 of 1 See more

openspeedtest speedtest 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
openspeedtest/latest :v2.0.0	d4d62f4b7d85	py3-setuptools@65.6.0-r0 setuptools@65.6.0	70.3.0-r0 70.0.0

Open the chart page →

2,040

netboxstartechnica

5.1.0

1 of 4 See more

netbox startechnica 5.1.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
netboxcommunity/netbox :v3.7.8-2.8.0	9bf83b350a89	setuptools@69.5.1	70.0.0

Open the chart page →

1,650

k8s-telegram-sendertelegram-sender

0.0.1

1 of 1 See more

k8s-telegram-sender telegram-sender 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
danuk/telegram-sender :0.0.1	026560388070	setuptools@58.1.0	70.0.0

Open the chart page →

3,048

grafana-pdf-exporterwiremind

2.1.1

1 of 1 See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	setuptools@66.1.1-1	66.1.1-1+deb12u1

Open the chart page →

9,746

alerta-webalerta-web

0.1.12

1 of 2 See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
hayk96/alerta-web :9.0.4	86377705e9e3	setuptools@58.1.0	70.0.0

Open the chart page →

3,569

aws-ecr-credentialarchitectminds

1.4.2

1 of 1 See more

aws-ecr-credential architectminds 1.4.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
architectminds/aws-kubectl :1.1	9735e59a1085	setuptools@41.0.1	70.0.0

Open the chart page →

1,437

openshift-consoleav1o-charts

0.3.6

1 of 1 See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	python-setuptools@39.2.0-5.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0

Open the chart page →

9,052

backup-zenbzen

0.1.4

1 of 1 See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
rezachalak/bzen-mongo :1.0.0	34f694325191	python-pip@20.0.2-5ubuntu1.9 setuptools@45.2.0-1ubuntu0.1 setuptools@45.2.0	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0

Open the chart page →

7,960

cmak-operatorcmak-operator

2.2.2

1 of 3 See more

cmak-operator cmak-operator 2.2.2

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/eshepelyuk/dckr/cmak2zk :1.2.0	22de6314c31e	setuptools@57.5.0	70.0.0

Open the chart page →

4,605

coder-observabilitycoder-observability

0.7.3

1 of 21 See more

coder-observability coder-observability 0.7.3

1 of the 21 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
kiwigrid/k8s-sidecar :1.24.3	5af76eebbba7	setuptools@65.5.1	70.0.0

Open the chart page →

24,700

codetogethercodetogether

1.4.25

1 of 1 See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
codetogether/codetogether :latest	4348c8a38752	python-setuptools@53.0.0-12.el9	0:53.0.0-12.el9_4.1

Open the chart page →

7,450

convertigoconvertigo

8.4.3

1 of 5 See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
baserow/baserow :1.30.1	df0c42eb67e8	setuptools@66.1.1-1 setuptools@66.1.1	66.1.1-1+deb12u1 70.0.0

Open the chart page →

17,404

cachetdeliveryhero

1.3.5

1 of 2 See more

cachet deliveryhero 1.3.5

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
cachethq/docker :2.3.15	a61ff0f67ea7	setuptools@33.1.1.post20171031	70.0.0

Open the chart page →

1,896

zabbix-kubernetes-discoverydjerfy

1.4.20

1 of 1 See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery :v1.4.20	7a50c07e7c69	setuptools@68.1.2	70.0.0

Open the chart page →

4,147

ecr-proxyevryfs-oss

0.2.9

1 of 1 See more

ecr-proxy evryfs-oss 0.2.9

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
esailors/aws-ecr-http-proxy :1.5.1	5608ae045fa7	setuptools@52.0.0	70.0.0

Open the chart page →

1,523

openshift-secured-appeximiait

0.5.0

1 of 1 See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:3.11-10.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-7.el8_6.1 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 70.0.0

Open the chart page →

12,042

openshift-secured-pgadmineximiait

0.2.0

2 of 2 See more

openshift-secured-pgadmin eximiait 0.2.0

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
dpage/pgadmin4 :7.5	37946e4f3e7b	py3-setuptools@67.7.2-r0 setuptools@67.7.2	70.3.0-r0 70.0.0
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:3.11-10.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-7.el8_6.1 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 70.0.0

Open the chart page →

14,546

openshift-secured-redisInsighteximiait

0.9.2

2 of 2 See more

openshift-secured-redisInsight eximiait 0.9.2

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
redislabs/redisinsight :1.14.0	b03ab1426d0d	setuptools@63.2.0	70.0.0
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:3.11-10.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-7.el8_6.1 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 70.0.0

Open the chart page →

13,874

deconzgeek-cookbook

6.5.2

1 of 1 See more

deconz geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
deconzcommunity/deconz :2.12.06	6541bbb78952	setuptools@40.8.0	70.0.0

Open the chart page →

3,555

esphomegeek-cookbook

8.4.2

1 of 1 See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
esphome/esphome :1.18.0	3f51ec10e823	setuptools@40.8.0	70.0.0

Open the chart page →

3,717

frigategeek-cookbook

8.2.2

1 of 1 See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	python-pip@20.0.2-5ubuntu1.6 setuptools@45.2.0-1 setuptools@45.2.0	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0

Open the chart page →

10,598

mealiegeek-cookbook

5.1.2

1 of 2 See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
hkotel/mealie :api-v1.0.0beta-2	a7e6b6abe087	setuptools@58.1.0	70.0.0

Open the chart page →

7,579

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	setuptools@45.2.0-1	45.2.0-1ubuntu0.2

Open the chart page →

10,154

tautulligeek-cookbook

11.4.2

1 of 1 See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	setuptools@45.2.0-1 setuptools@45.2.0	45.2.0-1ubuntu0.2 70.0.0

Open the chart page →

10,628

mlflowgetindata

0.1.2

1 of 1 See more

mlflow getindata 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
gcr.io/getindata-images-public/mlflow :latest	25d6975951f1	setuptools@65.5.1	70.0.0

Open the chart page →

2,452

nzbhydra2halkeye

2.30.1

1 of 2 See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
binhex/arch-nzbhydra2 :3.1.0-1-01	fb8952921ab6	setuptools@49.6.0	70.0.0

Open the chart page →

6,711

netbirdhelmforge

1.0.10

1 of 4 See more

netbird helmforge 1.0.10

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
netbirdio/dashboard :v2.90.10	1b59e1c905c9	setuptools@52.0.0	70.0.0

Open the chart page →

2,962

cratedbhmdmph

2.0.3

1 of 2 See more

cratedb hmdmph 2.0.3

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
library/crate :4.7.0	c7984a05e15b	setuptools@39.2.0	70.0.0

Open the chart page →

1,335

redis-pod-labelerhmdmph

1.0.2

1 of 1 See more

redis-pod-labeler hmdmph 1.0.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
hmdmph/redis-pod-labeler :1.0.0-alpine	7f1381fe0f3b	setuptools@47.1.1	70.0.0

Open the chart page →

2,985

mysql-clusterkfirfer

0.0.4

1 of 1 See more

mysql-cluster kfirfer 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
mysql/mysql-cluster :8.0.20	e4ea36622cdd	setuptools@40.8.0	70.0.0

Open the chart page →

416

kiali-operatorkiali

2.31.0

1 of 1 See more

kiali-operator kiali 2.31.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/kiali/kiali-operator :v2.31.0	f837d8f25545	setuptools@53.0.0	70.0.0

Open the chart page →

1,157

kubeviouskubevious

1.2.2

1 of 7 See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
redislabs/redisearch :2.4.14	33561794c5c8	setuptools@63.4.2	70.0.0

Open the chart page →

14,204

kubeservice-lxcfs-webhookkubservice-charts

1.6.0

1 of 6 See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
dongjiang1989/lxcfs :v6.0.3	4bf9ae391948	setuptools@45.2.0	70.0.0

Open the chart page →

11,582

memgraph-high-availabilitymemgraph

1.4.0

1 of 2 See more

memgraph-high-availability memgraph 1.4.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
memgraph/memgraph :3.13.0	a1dc375774ed	setuptools@68.1.2	70.0.0

Open the chart page →

1,373

flagsmithone-acre-fund

0.1.5

2 of 6 See more

flagsmith one-acre-fund 0.1.5

2 of the 6 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
blacktop/httpie :latest	fc5e68e2f5ab	setuptools@40.6.2	70.0.0
flagsmith/flagsmith-api :v2.6.0	fd58556339a4	setuptools@54.2.0	70.0.0

Open the chart page →

6,868

kobotoolboxone-acre-fund

0.7.4

2 of 9 See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
kobotoolbox/kobocat :2.022.24a	b15679454415	setuptools@63.2.0	70.0.0
kobotoolbox/kpi :2.022.24d	bcacc01bccd4	setuptools@63.2.0	70.0.0

Open the chart page →

18,517

open-zaakopen-zaak

0.8.0

1 of 3 See more

open-zaak open-zaak 0.8.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
openzaak/open-zaak :1.6.0	2ca2ea6e0ae9	setuptools@58.5.3	70.0.0

Open the chart page →

4,045

oesopsmx

4.0.32

8 of 25 See more

oes opsmx 4.0.32

8 of the 25 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/opsmxpublic/awsgit :v2-openssh	0d21ba756f44	setuptools@52.0.0	70.0.0
quay.io/opsmxpublic/awsgit :v3-js	15a6faada3d4	setuptools@52.0.0	70.0.0
quay.io/opsmxpublic/ubi8-gate :isd-spin-2025.10.01-5c720954-202511260810	2b3554029737	setuptools@39.2.0	70.0.0
quay.io/opsmxpublic/ubi8-oes-audit-client :isd-spin-2025.10.01-cb1bfce-202511261037	32a5b1887eab	setuptools@39.2.0	70.0.0
quay.io/opsmxpublic/ubi8-oes-autopilot :isd-spin-2025.10.01-af26a30d4-202511261054	58bd0bcf72f9	setuptools@39.2.0	70.0.0
quay.io/opsmxpublic/ubi8-oes-db :v3.0.0	89ee6493af89	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-6.el8_4.1 0:1.25.10-3.module+el8.4.0+9822+20bf1249 70.0.0
quay.io/opsmxpublic/ubi8-oes-platform :isd-spin-2025.10.01-a7c191ec-202511261122	8ed603ab7417	setuptools@39.2.0	70.0.0
quay.io/opsmxpublic/ubi8-oes-ui :isd-spin-2025.10.01-e6f6f01-202512100640	5d934bb66884	setuptools@39.2.0	70.0.0

Open the chart page →

107,811

Container images carrying it

1,039 by charts deploying them

A fixed version is listed for 17 of the 17 affected packages.

Container image	Digest	Package	Fixed in	Used by
pryorda/vmware_exporter :v0.18.4	79925e63e59f	setuptools@57.5.0	70.0.0	1
pryorda/vmware_exporter :v0.18.3	e0f5ba8b7856	setuptools@57.5.0	70.0.0	1
pschiffe/pdns-admin :0.4.1	37ebba8c2b8f	setuptools@65.5.1	70.0.0	1
psono/psono-server :5.0.0	3b974b43ea03	setuptools@65.5.1	70.0.0	1
pypiserver/pypiserver :v1.4.2	c9250d3c418d	setuptools@50.3.0	70.0.0	1
pypiserver/pypiserver :v2.4.1	e935e19433ef	setuptools@65.5.1	70.0.0	1
pysga1996/python-redis-web :latest	fdeec30ad482	setuptools@57.5.0	70.0.0	1
rdavidoff/twitch-channel-points-miner-v2 :1.8.6	7ae4c5135771	setuptools@65.5.1	70.0.0	1
redash/redash :25.8.0	00d813437db5	setuptools@65.5.0	70.0.0	1
redash/redash :10.0.0.b50363	9392753c0376	setuptools@57.5.0	70.0.0	1
redimp/otterwiki :2	778bf30da3da	setuptools@66.1.1	70.0.0	1
redislabs/redisearch :2.4.14	33561794c5c8	setuptools@63.4.2	70.0.0	1
redislabs/redisinsight :1.14.0	b03ab1426d0d	setuptools@63.2.0	70.0.0	1
redis/redis-stack-server :7.4.0-v0	887cf87cc744	setuptools@59.6.0-1.2ubuntu0.22.04.1	59.6.0-1.2ubuntu0.22.04.2	1
reportportal/service-auto-analyzer :5.7.2	95ada4a216ce	setuptools@57.5.0	70.0.0	1
reportportal/service-metrics-gatherer :1.1.20	2a0e6dc11161	setuptools@57.5.0	70.0.0	1
rezachalak/bzen-mongo :1.0.0	34f694325191	python-pip@20.0.2-5ubuntu1.9 setuptools@45.2.0-1ubuntu0.1 setuptools@45.2.0	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0	1
rhasspy/wyoming-piper :2.3.1	69b7f797ae3a	setuptools@66.1.1	70.0.0	1
rhasspy/wyoming-speech-to-phrase :1.4.3	e532f0dbc6b2	setuptools@66.1.1	70.0.0	1
rhasspy/wyoming-whisper :3.5.0	308b7959a925	setuptools@66.1.1	70.0.0	1
rhasspy/wyoming-whisper :1.0.0	80b99ddeef6c	setuptools@68.0.0	70.0.0	1
richardchesterwood/k8s-fleetman-webapp-angular :release2	ed7d720878ac	setuptools@33.1.1.post20171031	70.0.0	1
rm3l/dev-feed-api :latest	9a7f732245a3	python-setuptools@53.0.0-12.el9	0:53.0.0-12.el9_2.1	1
rm3l/mac-oui :1.8.0	3a5e1f95c132	python-setuptools@39.2.0-7.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0	1
roadiehq/community-backstage-image :latest	ef355bf5b639	setuptools@41.2.0	70.0.0	1
robmarkcole/deepstack-ui :latest	410275726459	setuptools@57.4.0	70.0.0	1
robotshop/rs-payment :latest	774b52c6180d	setuptools@57.4.0	70.0.0	1
rook/ceph :v1.20.7	2f970c425617	setuptools@69.2.0	70.0.0	1
rook/ceph :v1.19.2	944a1dd70496	setuptools@69.2.0	70.0.0	1
runx1/opta-agent :latest	0ca3867d3200	setuptools@62.1.0	70.0.0	1
salehmir/jesse :1.10.10	1afa95f979e9	setuptools@65.5.1	70.0.0	1
saltstack/salt :3006.3	e9c7906b7a5c	setuptools@58.1.0	70.0.0	1
samueldg/snappass :latest	3987195edbe6	setuptools@41.6.0	70.0.0	1
santisbon/evwatcher :latest	c4e994ca4540	setuptools@66.1.1-1 setuptools@66.1.1	66.1.1-1+deb12u1 70.0.0	1
santisbon/evworker :latest	e807283f8d69	setuptools@66.1.1-1 setuptools@66.1.1	66.1.1-1+deb12u1 70.0.0	1
santisbon/speedtest :latest	8ee3a1697227	setuptools@66.1.1-1 setuptools@66.1.1	66.1.1-1+deb12u1 70.0.0	1
sashafefler/spacecapybara_app :latest	f96d7804c0ca	setuptools@57.5.0	70.0.0	1
scrapinghub/splash :3.4.1	a5f89bc84606	python-pip@9.0.1-2.3~ubuntu1.18.04.1 python-setuptools@39.0.1-2 setuptools@44.0.0	9.0.1-2.3~ubuntu1.18.04.8+esm4 39.0.1-2ubuntu0.1+esm1 70.0.0	1
seafileltd/seafile-mc :9.0.10	6693911bcc40	python-pip@20.0.2-5ubuntu1.6 setuptools@45.2.0-1 setuptools@45.2.0	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0	1
seafileltd/seafile-mc :10.0.1	70628f29c663	python-pip@20.0.2-5ubuntu1.9 setuptools@45.2.0-1ubuntu0.1 setuptools@67.6.1	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0	1
seafileltd/seafile-mc :9.0.9	7ac833196f60	python-pip@20.0.2-5ubuntu1.6 setuptools@45.2.0-1 setuptools@45.2.0	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0	1
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	setuptools@59.6.0-1.2ubuntu0.22.04.1 setuptools@59.6.0	59.6.0-1.2ubuntu0.22.04.2 70.0.0	1
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	python-pip@20.0.2-5ubuntu1.6 setuptools@45.2.0-1 setuptools@45.2.0	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0	1
searx/searx :1.0.0-211-968b2899	3dbb3a6d9419	setuptools@47.0.0	70.0.0	1
seldonio/locust-core :0.8	1d0da98a2d76	python-pip@8.1.1-2ubuntu0.4 python-setuptools@20.7.0-1 setuptools@20.7.0	8.1.1-2ubuntu0.6+esm8 20.7.0-1ubuntu0.1~esm2 70.0.0	1
seldonio/seldon-request-logger :1.11.2	4e985d2006a8	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 python3x-pip@19.3.1-1.module+el8.4.0+8888+89bc7e79 python3x-setuptools@41.6.0-4.module+el8.4.0+8888+89bc7e79 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-6.el8_4.1 0:1.25.10-3.module+el8.4.0+9822+20bf1249 0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1 0:50.3.2-3.module+el8.4.0+22168+8a561f05.2 70.0.0	1
shaowenchen/ops-controller-manager :latest	26da43bb5b66	setuptools@59.6.0	70.0.0	1
shaowenchen/ops-server :latest	315444f703f4	setuptools@59.6.0	70.0.0	1
sharanalwar/redchef-backend :latest	8d3cab80df49	setuptools@58.1.0	70.0.0	1
shlomibendavid/k8s-applier :0311240529	a22ffbe0f04e	setuptools@69.1.1	70.0.0	1