StackRadar

CVE-2024-6345

High

Advisory

Published 15 Jul 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.019
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
974
of 17,787 indexed, latest versions
Container images
1,036
deployed by those charts
Fix available
17 of 17
affected packages

setuptools vulnerable to Command Injection via package URL

Carried by container images the latest versions of 974 of 17,787 indexed charts deploy, on 1,036 images.

Affected packageAffected versionsFixed inImages
setuptoolspypi0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+103 more70.0.0986
python-setuptoolsrpm0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+3 more0:0.9.8-7.el7_9.1, 0:39.2.0-6.el8_4.1, 0:39.2.0-7.el8_6.1, 0:39.2.0-7.el8_8.1+3 more115
setuptoolsdeb45.2.0-1, 45.2.0-1ubuntu0.1, 59.6.0-1.2, 59.6.0-1.2ubuntu0.22.04.1+2 more45.2.0-1ubuntu0.2, 59.6.0-1.2ubuntu0.22.04.2, 66.1.1-1+deb12u1, 68.1.2-2ubuntu1.1101
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+11 more1.5.4-1ubuntu4+esm5, 8.1.1-2ubuntu0.6+esm8, 9.0.1-2.3~ubuntu1.18.04.8+esm4, 20.0.2-5ubuntu1.10+esm260
python-setuptoolsdeb3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more3.3-1ubuntu2+esm2, 20.7.0-1ubuntu0.1~esm2, 39.0.1-2ubuntu0.1+esm1, 44.0.0-2ubuntu0.1+esm139
py3-setuptoolsapk65.6.0-r0, 67.7.2-r0, 68.2.2-r0, 69.5.1-r070.3.0-r021
python-chardetrpm3.0.4-7.el80:3.0.4-19.module+el8.4.0+9822+20bf124920
python-idnarpm2.5-5.el80:2.10-3.module+el8.4.0+9822+20bf124920
python-pysocksrpm1.6.8-3.el80:1.7.1-4.module+el8.4.0+9822+20bf124920
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_80:2.25.0-2.module+el8.4.0+9822+20bf124920
python-urllib3rpm1.24.2-5.el8, 1.24.2-5.el8_6.10:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be120
python3x-setuptoolsrpm41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+548604230:50.3.2-3.module+el8.4.0+22168+8a561f05.2, 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b9
python-plyrpm3.9-9.el80:3.11-10.module+el8.4.0+9822+20bf12497
python39rpm3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.10:3.9.2-2.module+el8.4.0+20027+45e0e702.2, 0:3.9.16-1.module+el8.8.0+20025+f2100191.26
python3x-piprpm19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf12490:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c4884
python3.11-setuptoolsrpm65.5.1-2.el90:65.5.1-2.el9_4.11
python-wheelrpm0.33.6-5.module+el8.4.0+8888+89bc7e791:0.35.1-3.module+el8.4.0+15042+dc5a279b.11
OSV records
ALPINE-CVE-2024-6345DEBIAN-CVE-2024-6345GHSA-cx63-2mw6-8hw5RHSA-2024:5000RHSA-2024:5040RHSA-2024:5078RHSA-2024:5084RHSA-2024:5137RHSA-2024:5279RHSA-2024:5530RHSA-2024:5534RHSA-2024:6220RHSA-2024:6488RHSA-2024:6662UBUNTU-CVE-2024-6345RLSA-2024:5530
Also known as
BIT-setuptools-2024-6345, PYSEC-2026-1918, RHSA-2024:6907, USN-7002-1

Charts affected

974 by stars
ChartLatestAffected imagesRadar Score
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
setuptools@58.1.0
70.0.0

Open the chart page →

11,367
rook-cephrookOfficialVerified publisher1.20.71 of 2See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
rook/ceph:v1.20.72f970c425617
setuptools@69.2.0
70.0.0

Open the chart page →

1,447
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

7,713
ceph-csi-cephfsceph-csiOfficialVerified publisher3.17.11 of 6See more

ceph-csi-cephfs ceph-csi 3.17.1

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
setuptools@69.2.0
70.0.0

Open the chart page →

4,061
ceph-csi-rbdceph-csiOfficialVerified publisher3.17.11 of 6See more

ceph-csi-rbd ceph-csi 3.17.1

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
setuptools@69.2.0
70.0.0

Open the chart page →

4,061
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
setuptools@63.4.2
70.0.0

Open the chart page →

9,145
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

32,259
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
setuptools@66.1.1-1
setuptools@66.1.1
66.1.1-1+deb12u1
70.0.0

Open the chart page →

10,622
locustdeliveryheroVerified publisher0.35.01 of 1See more

locust deliveryhero 0.35.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
setuptools@65.5.1
70.0.0

Open the chart page →

2,800
nacosygqygq2Verified publisher2.1.101 of 4See more

nacos ygqygq2 2.1.10

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ygqygq2/mysql-exec-sql:latest54f30def1558
setuptools@50.3.2
70.0.0

Open the chart page →

4,983
difydoubanVerified publisher0.10.02 of 6See more

dify douban 0.10.0

2 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
setuptools@68.1.2
70.0.0
langgenius/dify-sandbox:0.2.124e65e8a351a2
setuptools@65.5.1
70.0.0

Open the chart page →

19,391
stackgres-operatorstackgres-chartsOfficialVerified publisher1.19.12 of 2See more

stackgres-operator stackgres-charts 1.19.1

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/ongres/kubectl:v1.25.16-build-6.5304dada9e4503
setuptools@68.2.2
70.0.0
quay.io/stackgres/operator:1.19.1f241b0b20326
setuptools@68.2.2
70.0.0

Open the chart page →

2,119
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
setuptools@68.1.2
70.0.0

Open the chart page →

22,002
ambassadordatawire6.9.51 of 2See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
setuptools@50.3.2
70.0.0

Open the chart page →

4,086
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
setuptools@66.1.1
70.0.0

Open the chart page →

11,384
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
setuptools@59.6.0-1.2
59.6.0-1.2ubuntu0.22.04.2

Open the chart page →

33,725
emissary-ingressdatawire7.1.8-ea1 of 1See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
datawire/emissary:2.0.2-ea9716efbdd24b
setuptools@50.3.2
70.0.0

Open the chart page →

4,918
kube-downscalerdeliveryheroVerified publisher0.7.61 of 1See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
setuptools@65.5.1
70.0.0

Open the chart page →

4,293
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
setuptools@60.8.1
70.0.0

Open the chart page →

7,705
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
setuptools@67.6.0
70.0.0

Open the chart page →

6,543
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
setuptools@65.5.0
70.0.0

Open the chart page →

5,987
pypiservercommunity-chartsVerified publisher0.1.91 of 1See more

pypiserver community-charts 0.1.9

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
pypiserver/pypiserver:v2.4.1e935e19433ef
setuptools@65.5.1
70.0.0

Open the chart page →

584
daskdask2024.1.12 of 2See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/dask/dask:2024.1.0080150de7d86
setuptools@68.1.2
70.0.0
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
setuptools@69.0.3
70.0.0

Open the chart page →

12,746
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
python-setuptools@39.0.1-2
39.0.1-2ubuntu0.1+esm1

Open the chart page →

15,592
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
setuptools@68.2.2
70.0.0

Open the chart page →

6,041
yugabyteyugabyteVerified publisher2026.1.11 of 1See more

yugabyte yugabyte 2026.1.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
yugabytedb/yugabyte:2026.1.1.1-b23926eedf0ff4
setuptools@65.5.1
70.0.0

Open the chart page →

351
edge-stackdatawire7.1.8-ea1 of 2See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
datawire/aes:2.0.3-ea07f8fe4f4f8e
setuptools@50.3.2
70.0.0

Open the chart page →

5,173
milvusmilvus-helm5.0.281See more

milvus milvus-helm 5.0.28

1 container image this version deploys carries CVE-2024-6345.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
setuptools@59.6.0
70.0.0

Open the chart page →

—
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
setuptools@45.2.0-1
45.2.0-1ubuntu0.2

Open the chart page →

18,509
apicurio-registryapicurio-registry-helmVerified publisher3.8.01 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

6,675
supersetcloudposse1.2.01 of 1See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
setuptools@44.0.0
70.0.0

Open the chart page →

5,851
servarrkubitodevVerified publisher1.5.21 of 10See more

servarr kubitodev 1.5.2

1 of the 10 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.3.21f104ee51e512
setuptools@65.5.1
70.0.0

Open the chart page →

3,004
stackstorm-hastackstormVerified publisher1.1.011 of 17See more

stackstorm-ha stackstorm 1.1.0

11 of the 17 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
stackstorm/st2api:3.86f56d239d280
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
stackstorm/st2auth:3.833ecfda16608
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
stackstorm/st2notifier:3.8f190a6212195
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
stackstorm/st2rulesengine:3.8259503496ff9
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
stackstorm/st2scheduler:3.8b1de2055c362
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
stackstorm/st2sensorcontainer:3.8b1a338f64773
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
stackstorm/st2stream:3.81c8904a3bf67
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
stackstorm/st2timersengine:3.81bf35bfaf00c
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
stackstorm/st2workflowengine:3.819fdfffdbba8
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

96,419
frigateblakeblackshear7.8.01 of 1See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
setuptools@52.0.0
70.0.0

Open the chart page →

3,004
kube-prometheuschoerodon9.3.11 of 7See more

kube-prometheus choerodon 9.3.1

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.1517b98eecdf6d1
setuptools@46.1.3
70.0.0

Open the chart page →

12,237
openclawopenclawVerified publisher1.91.31 of 2See more

openclaw openclaw 1.91.3

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
setuptools@68.1.2
70.0.0

Open the chart page →

2,977
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
setuptools@47.3.1
70.0.0
dbanda/spark:2.4.6d0e6367876ae
setuptools@47.3.1
70.0.0

Open the chart page →

13,738
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
setuptools@49.2.0
70.0.0

Open the chart page →

30,326
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
openmined/syft-seaweedfs:0.9.53a4144c0bb82
py3-setuptools@68.2.2-r0
setuptools@68.2.2
70.3.0-r0
70.0.0

Open the chart page →

17,245
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
setuptools@45.2.0-1
45.2.0-1ubuntu0.2

Open the chart page →

11,782
barmanadfinisVerified publisher0.10.01 of 1See more

barman adfinis 0.10.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ubcctlt/barman:v2.19cbbbbc8ae16b
setuptools@61.2.0
70.0.0

Open the chart page →

1,552
zabbix-serveraekondratievVerified publisher1.0.61 of 4See more

zabbix-server aekondratiev 1.0.6

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
setuptools@45.2.0-1
45.2.0-1ubuntu0.2

Open the chart page →

30,668
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
setuptools@66.1.1
70.0.0

Open the chart page →

6,457
awx-operatorawx-operator-helm3.2.11 of 2See more

awx-operator awx-operator-helm 3.2.1

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

9,868
codercoderOfficialVerified publisher1.44.62 of 2See more

coder coder 1.44.6

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
coderenvs/coder-service:1.44.61deffc4670e6
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
coderenvs/timescale:1.44.676fd37fe6830
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

6,849
invoiceninjainvoiceninjaVerified publisher0.10.21 of 5See more

invoiceninja invoiceninja 0.10.2

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
invoiceninja/invoiceninja:5.6.241437916dee01
py3-setuptools@67.7.2-r0
setuptools@67.7.2
70.3.0-r0
70.0.0

Open the chart page →

2,709
pmmpercona1.9.11 of 1See more

pmm percona 1.9.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
percona/pmm-server:3.9.1003f9c25f842
setuptools@53.0.0
70.0.0

Open the chart page →

790
servarrservarr1.0.23 of 10See more

servarr servarr 1.0.2

3 of the 10 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
dinutac/jinja2docker:2.1.89340dde8a8a4
py3-setuptools@68.2.2-r0
setuptools@68.2.2
70.3.0-r0
70.0.0
nyurik/alpine-python3-requests:lateste0553236e3eb
setuptools@57.1.0
70.0.0
ghcr.io/flaresolverr/flaresolverr:v3.3.16088412db1051
setuptools@65.5.1
70.0.0

Open the chart page →

14,238
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.11.11da5c38c6a78
setuptools@65.5.1
70.0.0

Open the chart page →

6,168
fadicetic0.3.14 of 25See more

fadi cetic 0.3.1

4 of the 25 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
setuptools@44.0.0
70.0.0
ceticasbl/pg-ldap-sync:latest6c0aa7567145
setuptools@40.8.0
70.0.0
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
python-pip@20.0.2-5ubuntu1.1
setuptools@45.2.0-1
setuptools@51.1.2
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
setuptools@49.6.0.post20201009
70.0.0

Open the chart page →

52,919

Container images carrying it

1,036 by charts deploying them

A fixed version is listed for 17 of the 17 affected packages.

Container imageDigestPackageFixed inUsed by
vividplanet/swr-cache-proxy:v1ae1c5b1cbecb
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
voltha/voltha-cli:1.6.0c4e41e92f046
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@40.6.2
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
1
voltha/voltha-netconf:1.6.037f80524c207
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@20.7.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@20.7.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
1
voltha/voltha-tester:1.7.0655c3048a602
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@20.7.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
1
voltha/voltha-voltha:1.6.0ff596b62de59
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@40.6.2
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
1
wallarm/sysbindings:v0.9.9c527865df85d
setuptools@63.2.0
70.0.0
1
wazuh/wazuh-manager:4.11.11da5c38c6a78
setuptools@65.5.1
70.0.0
1
wazuh/wazuh-manager:4.4.121994f40e0da
setuptools@65.5.1
70.0.0
1
weblate/weblate:3.11.3-182848df56ecd
setuptools@40.8.0
70.0.0
1
wener/samba:4.13.39a42bae466d4
setuptools@51.3.3
70.0.0
1
wiktorn/overpass-api:latest9bb5f4a9b54c
setuptools@66.1.1
70.0.0
1
wiremind/pghoard:12-2019-11-264dea42c8166c
setuptools@40.8.0
70.0.0
1
witcherek7/pav:0.0.342a744f29ac0
setuptools@65.5.1
70.0.0
1
woojoong/wowza:latestec230db19652
python-setuptools@39.0.1-2
39.0.1-2ubuntu0.1+esm1
1
xeladock/mysql_dns:latest4baf531453f1
setuptools@59.6.0-1.2
setuptools@59.6.0
59.6.0-1.2ubuntu0.22.04.2
70.0.0
1
ygqygq2/mysql-exec-sql:latest54f30def1558
setuptools@50.3.2
70.0.0
1
youssef11gaber10/deployment-weather-flask:latest96bce8b8b5a7
setuptools@57.5.0
70.0.0
1
yugabytedb/yugabyte:2026.1.1.1-b23926eedf0ff4
setuptools@65.5.1
70.0.0
1
yugabytedb/yugabyte:2026.1.1.0-b91de2e00278645
setuptools@65.5.1
70.0.0
1
yuzutech/kroki-blockdiag:0.16.07c1917c66d96
setuptools@57.5.0
70.0.0
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
setuptools@45.2.0-1
45.2.0-1ubuntu0.2
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
setuptools@59.6.0-1.2
59.6.0-1.2ubuntu0.22.04.2
1
zammad/zammad-docker-compose:zammad-elasticsearch-4.1.0-318274d75a51fc
setuptools@39.2.0
70.0.0
1
zohardocker12/weather_app_flask:latestb86d60dbb68d
setuptools@57.0.0
70.0.0
1
zurdi15/romm:2.3.12db88fe44c89
setuptools@65.5.0
70.0.0
1
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
setuptools@65.5.1
70.0.0
1
gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3360130ab5850
setuptools@54.1.1
70.0.0
1
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
setuptools@54.1.1
70.0.0
1
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
setuptools@53.0.0
70.0.0
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
setuptools@57.5.0
70.0.0
1
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
setuptools@57.5.0
70.0.0
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
setuptools@65.5.1
70.0.0
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
setuptools@57.5.0
70.0.0
1
ghcr.io/appuio/maxscale-docker:6.4.613a01be102b0
setuptools@39.2.0
python-setuptools@39.2.0-6.el8_7.1
70.0.0
0:39.2.0-8.el8_10
1
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
setuptools@59.4.0
70.0.0
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
setuptools@66.1.1
70.0.0
1
ghcr.io/aws-exporters/prometheus-ecr-exporter:0.1.442b0c87470d6
setuptools@52.0.0
70.0.0
1
ghcr.io/aws-exporters/prometheus-inspector-exporter:0.0.29c7c11293b3c
setuptools@52.0.0
70.0.0
1
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
setuptools@69.0.2
70.0.0
1
ghcr.io/b-it-projects-gmbh/nvme_exporter:lateste70307b193c6
setuptools@58.1.0
70.0.0
1
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
setuptools@52.0.0
70.0.0
1
ghcr.io/blakeblackshear/frigate:0.13.07a5244e4c8dc
setuptools@52.0.0
70.0.0
1
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
setuptools@52.0.0
70.0.0
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
setuptools@45.2.0-1ubuntu0.1
45.2.0-1ubuntu0.2
1
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
setuptools@68.1.2
70.0.0
1
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
setuptools@68.1.2
70.0.0
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
setuptools@68.1.2
70.0.0
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
setuptools@66.1.1
70.0.0
1
ghcr.io/cloudnative-pg/postgresql:18899d3ed526b6
setuptools@52.0.0
70.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.