StackRadar

CVE-2024-6345

High

Advisory

Published 15 Jul 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.019
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
986
of 17,787 indexed, latest versions
Container images
1,047
deployed by those charts
Fix available
17 of 17
affected packages

setuptools vulnerable to Command Injection via package URL

Carried by container images the latest versions of 986 of 17,787 indexed charts deploy, on 1,047 images.

Affected packageAffected versionsFixed inImages
setuptoolspypi0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+104 more70.0.0997
python-setuptoolsrpm0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+3 more0:0.9.8-7.el7_9.1, 0:39.2.0-6.el8_4.1, 0:39.2.0-7.el8_6.1, 0:39.2.0-7.el8_8.1+3 more117
setuptoolsdeb45.2.0-1, 45.2.0-1ubuntu0.1, 59.6.0-1.2, 59.6.0-1.2ubuntu0.22.04.1+2 more45.2.0-1ubuntu0.2, 59.6.0-1.2ubuntu0.22.04.2, 66.1.1-1+deb12u1, 68.1.2-2ubuntu1.1102
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+11 more1.5.4-1ubuntu4+esm5, 8.1.1-2ubuntu0.6+esm8, 9.0.1-2.3~ubuntu1.18.04.8+esm4, 20.0.2-5ubuntu1.10+esm260
python-setuptoolsdeb3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more3.3-1ubuntu2+esm2, 20.7.0-1ubuntu0.1~esm2, 39.0.1-2ubuntu0.1+esm1, 44.0.0-2ubuntu0.1+esm139
py3-setuptoolsapk65.6.0-r0, 67.7.2-r0, 68.2.2-r0, 69.5.1-r070.3.0-r021
python-chardetrpm3.0.4-7.el80:3.0.4-19.module+el8.4.0+9822+20bf124920
python-idnarpm2.5-5.el80:2.10-3.module+el8.4.0+9822+20bf124920
python-pysocksrpm1.6.8-3.el80:1.7.1-4.module+el8.4.0+9822+20bf124920
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_80:2.25.0-2.module+el8.4.0+9822+20bf124920
python-urllib3rpm1.24.2-5.el8, 1.24.2-5.el8_6.10:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be120
python3x-setuptoolsrpm41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+548604230:50.3.2-3.module+el8.4.0+22168+8a561f05.2, 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b9
python-plyrpm3.9-9.el80:3.11-10.module+el8.4.0+9822+20bf12497
python39rpm3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.10:3.9.2-2.module+el8.4.0+20027+45e0e702.2, 0:3.9.16-1.module+el8.8.0+20025+f2100191.26
python3x-piprpm19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf12490:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c4884
python3.11-setuptoolsrpm65.5.1-2.el90:65.5.1-2.el9_4.11
python-wheelrpm0.33.6-5.module+el8.4.0+8888+89bc7e791:0.35.1-3.module+el8.4.0+15042+dc5a279b.11
OSV records
ALPINE-CVE-2024-6345DEBIAN-CVE-2024-6345GHSA-cx63-2mw6-8hw5RHSA-2024:5000RHSA-2024:5040RHSA-2024:5078RHSA-2024:5084RHSA-2024:5137RHSA-2024:5279RHSA-2024:5530RHSA-2024:5534RHSA-2024:6220RHSA-2024:6488RHSA-2024:6662UBUNTU-CVE-2024-6345RLSA-2024:5530
Also known as
BIT-setuptools-2024-6345, PYSEC-2026-1918, RHSA-2024:6907, USN-7002-1

Charts affected

986 by stars
ChartLatestAffected imagesRadar Score
netbirdnetbird1.9.01 of 4See more

netbird netbird 1.9.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
netbirdio/dashboard:v2.13.188b5fb704a8c
setuptools@52.0.0
70.0.0

Open the chart page →

6,367
neuralbank-stackneuralbank-stack0.1.01 of 4See more

neuralbank-stack neuralbank-stack 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuralbank-frontend:latest5f4572ef6d6f
setuptools@53.0.0
70.0.0

Open the chart page →

5,198
neurofaceneurofaceVerified publisher1.4.22 of 3See more

neuroface neuroface 1.4.2

2 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuroface-backend:v1.4.13194d46df0f9
setuptools@53.0.0
70.0.0
quay.io/maximilianopizarro/neuroface-frontend:v1.4.1841b70cd1424
setuptools@53.0.0
70.0.0

Open the chart page →

7,413
nfl-walletnfl-walletVerified publisher0.1.31 of 4See more

nfl-wallet nfl-wallet 0.1.3

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/nfl-wallet-webapp:1.0.13fead5702be7
setuptools@39.2.0
70.0.0

Open the chart page →

13,047
node-debug-dashboardnode-debug-dashboardVerified publisher0.3.21 of 1See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
setuptools@66.1.1
70.0.0

Open the chart page →

6,861
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

22,713
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
python-setuptools@3.3-1ubuntu1
3.3-1ubuntu2+esm2

Open the chart page →

41,455
notification-componentnotification-component1.0.01 of 4See more

notification-component notification-component 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
setuptools@47.0.0
70.0.0

Open the chart page →

7,527
nexus2novum-rgi-charts0.1.11 of 1See more

nexus2 novum-rgi-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
sonatype/nexus:oss6bc88b51d4d7
python-setuptools@0.9.8-7.el7
setuptools@0.9.8
0:0.9.8-7.el7_9.1
70.0.0

Open the chart page →

3,219
nfs-server-provisionernovum-rgi-charts1.1.21 of 1See more

nfs-server-provisioner novum-rgi-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
setuptools@40.8.0
70.0.0

Open the chart page →

2,806
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
python-pip@9.0.1-2.3~ubuntu1.18.04.1
python-setuptools@39.0.1-2
setuptools@44.0.0
9.0.1-2.3~ubuntu1.18.04.8+esm4
39.0.1-2ubuntu0.1+esm1
70.0.0

Open the chart page →

27,667
object-clonerobject-clonerVerified publisher2.0.01 of 1See more

object-cloner object-cloner 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/ideamixes/object-cloner:2.0.031030fd2f192
setuptools@65.5.1
70.0.0

Open the chart page →

1,587
kuttleokgoloveVerified publisher2.0.01 of 1See more

kuttle okgolove 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/python:3.7-alpinef3d31c8677d0
setuptools@57.5.0
70.0.0

Open the chart page →

797
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
setuptools@59.6.0-1.2ubuntu0.22.04.1
setuptools@59.6.0
59.6.0-1.2ubuntu0.22.04.2
70.0.0

Open the chart page →

9,059
apicurioone-acre-fundVerified publisher2.3.03 of 5See more

apicurio one-acre-fund 2.3.0

3 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-7.el8_8.1
70.0.0
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-7.el8_8.1
70.0.0
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-7.el8_8.1
70.0.0

Open the chart page →

18,666
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
vespaengine/vespa:8.526.1569b160f58211
setuptools@39.2.0
70.0.0

Open the chart page →

6,252
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
python-wheel@0.33.6-5.module+el8.4.0+8888+89bc7e79
python3x-pip@19.3.1-1.module+el8.4.0+8888+89bc7e79
python3x-setuptools@41.6.0-4.module+el8.4.0+8888+89bc7e79
setuptools@41.6.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-6.el8_4.1
0:1.25.10-3.module+el8.4.0+9822+20bf1249
1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1
0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1
0:50.3.2-3.module+el8.4.0+22168+8a561f05.2
70.0.0

Open the chart page →

18,023
comacopencord1.0.04 of 9See more

comac opencord 1.0.0

4 of the 9 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
setuptools@40.6.3.post20190116
70.0.0
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@39.0.1
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
omecproject/onos-progran:1.0.05715e5648aa0
python-setuptools@20.7.0-1
20.7.0-1ubuntu0.1~esm2
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@39.0.1
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

88,616
comac-platformopencord0.0.172 of 11See more

comac-platform opencord 0.0.17

2 of the 11 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
setuptools@40.6.3.post20190116
70.0.0
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@39.0.1
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

26,234
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
woojoong/wowza:latestec230db19652
python-setuptools@39.0.1-2
39.0.1-2ubuntu0.1+esm1

Open the chart page →

42,662
nem-monitoringopencord1.3.221 of 9See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.20af151f677a63
setuptools@41.0.1
70.0.0

Open the chart page →

4,612
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
omecproject/mme-exporter:paging-latestbcc5f19fd676
python-pip@9.0.1-2.3~ubuntu1.18.04.1
python-setuptools@39.0.1-2
setuptools@39.0.1
9.0.1-2.3~ubuntu1.18.04.8+esm4
39.0.1-2ubuntu0.1+esm1
70.0.0

Open the chart page →

40,795
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
python-setuptools@20.7.0-1
20.7.0-1ubuntu0.1~esm2

Open the chart page →

38,889
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@20.7.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

12,631
sebaopencord1.0.04 of 17See more

seba opencord 1.0.0

4 of the 17 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
voltha/voltha-cli:1.6.0c4e41e92f046
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@40.6.2
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
voltha/voltha-netconf:1.6.037f80524c207
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@20.7.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
voltha/voltha-ofagent:1.6.09ee8c1f4428c
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@20.7.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
voltha/voltha-voltha:1.6.0ff596b62de59
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@40.6.2
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

93,965
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
setuptools@65.5.0
70.0.0

Open the chart page →

11,003
open-pdcopen-pdc0.1.01 of 3See more

open-pdc open-pdc 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
70.0.0

Open the chart page →

3,423
open-pubopen-pub0.1.01 of 3See more

open-pub open-pub 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
70.0.0

Open the chart page →

3,423
akeyless-api-gatewayopenshift1.41.21 of 1See more

akeyless-api-gateway openshift 1.41.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
akeyless/base-rhel:0.0.14ba8900a0061
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

11,795
bpjstk-serviceopenshift1.0.03 of 6See more

bpjstk-service openshift 1.0.0

3 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
andrianrf/backoffice:latest047a7837651e
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
andrianrf/backoffice-be:latest6036614803d4
python-setuptools@53.0.0-12.el9
0:53.0.0-12.el9_2.1
andrianrf/iso-server:latest7da47f525c7d
python-setuptools@53.0.0-12.el9
0:53.0.0-12.el9_2.1

Open the chart page →

34,721
canvas-oamportalopenshift4.0.01 of 1See more

canvas-oamportal openshift 4.0.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
gurolakman/oam:4.0.0ed8fd2062548
setuptools@39.2.0
70.0.0

Open the chart page →

7,519
chatbot-ai-sampleopenshift0.1.62 of 4See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/ai-lab/llamacpp_python:latest70d138997acd
setuptools@65.5.1
70.0.0
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
python-setuptools@53.0.0-12.el9
python3.11-setuptools@65.5.1-2.el9
setuptools@65.5.1
0:53.0.0-12.el9_4.1
0:65.5.1-2.el9_4.1
70.0.0

Open the chart page →

18,991
exporteropenshift1.0.473 of 3See more

exporter openshift 1.0.47

3 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
public.ecr.aws/perfectscale-io/kube-state-metrics:4.1.14-redhat849e235e2d3e
setuptools@39.2.0
70.0.0
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
setuptools@53.0.0
70.0.0
public.ecr.aws/perfectscale-io/ubi9/ubi:9.5d7c3def9252b
setuptools@53.0.0
70.0.0

Open the chart page →

13,034
flomesh-consoleopenshift0.70.0-30-ubi82 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
quay.io/flomesh/pipy-repo-ubi8:0.70.0-469912fdf6c183
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

9,968
fsmopenshift0.1.8-ubi.61 of 6See more

fsm openshift 0.1.8-ubi.6

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/flomesh/pipy-ubi8:0.50.0-8824352dca6672
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

16,554
hamiopenshift2.10.0-r0-openshift.c4e22e881 of 2See more

hami openshift 2.10.0-r0-openshift.c4e22e88

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/dynamia-ai/hami-enterprise:v2.10.0-r0-openshift.c4e22e88745504757300
setuptools@39.2.0
70.0.0

Open the chart page →

4,749
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
setuptools@53.0.0
70.0.0

Open the chart page →

4,145
kite-agentopenshift1.0.01 of 1See more

kite-agent openshift 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/fengyuanxing/zte_endogenous_security/kite-agent:V2.0.0734808044936
setuptools@39.2.0
70.0.0

Open the chart page →

5,863
orion-ldopenshift1.0.32 of 2See more

orion-ld openshift 1.0.3

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/fiware/orion-ld:1.0.1ea838e5b4051
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
quay.io/opencloudio/ibm-mongodb:4.0.24d8c631a6dc43
setuptools@39.0.1
70.0.0

Open the chart page →

14,727
osm-edgeopenshift1.2.1-ubi81 of 7See more

osm-edge openshift 1.2.1-ubi8

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/flomesh/pipy-ubi8:0.70.0-4635d87a381432
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

19,449
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
python-setuptools@53.0.0-12.el9
setuptools@53.0.0
0:53.0.0-12.el9_2.1
70.0.0

Open the chart page →

8,634
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

13,608
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

11,740
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

13,570
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

13,553
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

13,457
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

13,101
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
python-setuptools@39.0.1-2
39.0.1-2ubuntu0.1+esm1

Open the chart page →

15,607
open-webconceptopen-webconcept0.1.01 of 3See more

open-webconcept open-webconcept 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
70.0.0

Open the chart page →

3,423
openwhiskopenwhisk1.0.02 of 10See more

openwhisk openwhisk 1.0.0

2 of the 10 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
openwhisk/kafkaprovider:2.1.063dc3d2a0904
setuptools@41.4.0
70.0.0
openwhisk/ow-utils:1.0.0c80dba0de3aa
python-pip@9.0.1-2.3~ubuntu1.18.04.4
python-setuptools@39.0.1-2
setuptools@44.1.1
9.0.1-2.3~ubuntu1.18.04.8+esm4
39.0.1-2ubuntu0.1+esm1
70.0.0

Open the chart page →

36,230

Container images carrying it

1,047 by charts deploying them

A fixed version is listed for 17 of the 17 affected packages.

Container imageDigestPackageFixed inUsed by
seldonio/seldon-request-logger:1.11.24e985d2006a8
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
python3x-pip@19.3.1-1.module+el8.4.0+8888+89bc7e79
python3x-setuptools@41.6.0-4.module+el8.4.0+8888+89bc7e79
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-6.el8_4.1
0:1.25.10-3.module+el8.4.0+9822+20bf1249
0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1
0:50.3.2-3.module+el8.4.0+22168+8a561f05.2
70.0.0
1
shaowenchen/ops-controller-manager:latest26da43bb5b66
setuptools@59.6.0
70.0.0
1
shaowenchen/ops-server:latest315444f703f4
setuptools@59.6.0
70.0.0
1
sharanalwar/redchef-backend:latest8d3cab80df49
setuptools@58.1.0
70.0.0
1
shlomibendavid/k8s-applier:0311240529a22ffbe0f04e
setuptools@69.1.1
70.0.0
1
signalen/classification:ad60447d1733473e30ab0a3ba53d58141cc1d2509496ae672877
setuptools@40.8.0
70.0.0
1
sirrend/helmup-notifications-service:0.1.3997866417011
setuptools@65.5.1
70.0.0
1
skylenet/ethereum-genesis-generator:latest210353ce7c89
setuptools@52.0.0
70.0.0
1
snipe/snipe-it:v6.0.1455fb7636a98c
setuptools@45.2.0-1
45.2.0-1ubuntu0.2
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
python-pip@20.0.2-5ubuntu1.9
setuptools@45.2.0-1ubuntu0.1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0
1
socialmediamacroscope/classification_predict:0.1.24fb86885d64d
setuptools@57.5.0
70.0.0
1
socialmediamacroscope/classification_split:0.1.24bfda60829fe
setuptools@57.5.0
70.0.0
1
socialmediamacroscope/classification_train:0.1.207477060bba8
setuptools@57.5.0
70.0.0
1
socialmediamacroscope/clowder_create_collection:0.1.0c969f7677983
setuptools@57.5.0
70.0.0
1
socialmediamacroscope/clowder_create_dataset:0.1.09b4211832429
setuptools@57.5.0
70.0.0
1
socialmediamacroscope/clowder_create_space:0.1.0999f2ff2c128
setuptools@57.5.0
70.0.0
1
socialmediamacroscope/clowder_list:0.1.051cb17626519
setuptools@57.5.0
70.0.0
1
socialmediamacroscope/clowder_upload_file:0.1.274e35f64db68
setuptools@57.5.0
70.0.0
1
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
python-pip@9.0.1-2.3~ubuntu1.18.04.8
python-setuptools@39.0.1-2ubuntu0.1
setuptools@39.0.1
9.0.1-2.3~ubuntu1.18.04.8+esm4
39.0.1-2ubuntu0.1+esm1
70.0.0
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
setuptools@57.5.0
70.0.0
1
socialmediamacroscope/image_crawler:0.1.2f508216be63c
python-pip@9.0.1-2.3~ubuntu1.18.04.8
python-setuptools@39.0.1-2ubuntu0.1
setuptools@39.0.1
9.0.1-2.3~ubuntu1.18.04.8+esm4
39.0.1-2ubuntu0.1+esm1
70.0.0
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
setuptools@57.5.0
70.0.0
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
setuptools@57.5.0
70.0.0
1
socialmediamacroscope/screen_name_prompt:0.1.2724f3f5702e0
setuptools@57.5.0
70.0.0
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
setuptools@57.5.0
70.0.0
1
softonic/gar-exporter:0.2.1a64d6c0e0ae5
setuptools@50.3.2
70.0.0
1
softonic/mysql-backup:0.4.0d9487a8dd70f
setuptools@40.6.2
70.0.0
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0
1
sonatype/nexus:oss6bc88b51d4d7
python-setuptools@0.9.8-7.el7
setuptools@0.9.8
0:0.9.8-7.el7_9.1
70.0.0
1
sonatype/nexus3:3.53.04bd975493104
python-setuptools@39.2.0-6.el8_7.1
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
sonatype/nexus3:3.58.1586060431b64
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-7.el8_8.1
70.0.0
1
speckle/speckle-monitor-deployment:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2faf1508c1d3
setuptools@66.1.1
70.0.0
1
speckle/speckle-monitor-deployment:2.20.2-branch.testing4.134160-9fad4b23c8fbe855665
setuptools@66.1.1
70.0.0
1
speckle/speckle-monitor-deployment:2.20.6-branch.testing1.154030-9b09114738c77eb6f97
setuptools@66.1.1
70.0.0
1
speckle/speckle-monitor-deployment:2.18.12-branch.testing3.88744-f55b34181335b40696a
setuptools@66.1.1
70.0.0
1
speckle/speckle-monitor-deployment:2.19.2-branch.hotfix-2.19.1.124125-665e7e1b696ac5022ab
setuptools@66.1.1
70.0.0
1
speckle/speckle-monitor-deployment:2.21.3-branch.testing5.219631-2153befcf72ad0f25fb
setuptools@66.1.1
70.0.0
1
speckle/speckle-monitor-deployment:2.18.11-branch.testing2.88634-335d469d6790a97ad47
setuptools@66.1.1
70.0.0
1
speckle/speckle-monitor-deployment:2.17.14-branch.testing.72707.921a5f8ff1641ac3f1b
setuptools@66.1.1
70.0.0
1
splunk/splunk-operator:2.0.0c4e0d3146226
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-7.el8_6.1
0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
70.0.0
1
sslhep/servicex-did-finder:v1.8.5ab0090083567
setuptools@53.0.0
70.0.0
1
sslhep/x509-secrets:v1.8.5d9e9ecb12d59
setuptools@53.0.0
70.0.0
1
stackstorm/st2actionrunner:3.888235ba70cad
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
1
stackstorm/st2api:3.86f56d239d280
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
1
stackstorm/st2auth:3.833ecfda16608
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
1
stackstorm/st2notifier:3.8f190a6212195
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
1
stackstorm/st2rulesengine:3.8259503496ff9
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
1
stackstorm/st2scheduler:3.8b1de2055c362
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.