StackRadar

CVE-2024-6345

High

Advisory

Published 15 Jul 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.019
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
986
of 17,787 indexed, latest versions
Container images
1,047
deployed by those charts
Fix available
17 of 17
affected packages

setuptools vulnerable to Command Injection via package URL

Carried by container images the latest versions of 986 of 17,787 indexed charts deploy, on 1,047 images.

Affected packageAffected versionsFixed inImages
setuptoolspypi0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+104 more70.0.0997
python-setuptoolsrpm0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+3 more0:0.9.8-7.el7_9.1, 0:39.2.0-6.el8_4.1, 0:39.2.0-7.el8_6.1, 0:39.2.0-7.el8_8.1+3 more117
setuptoolsdeb45.2.0-1, 45.2.0-1ubuntu0.1, 59.6.0-1.2, 59.6.0-1.2ubuntu0.22.04.1+2 more45.2.0-1ubuntu0.2, 59.6.0-1.2ubuntu0.22.04.2, 66.1.1-1+deb12u1, 68.1.2-2ubuntu1.1102
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+11 more1.5.4-1ubuntu4+esm5, 8.1.1-2ubuntu0.6+esm8, 9.0.1-2.3~ubuntu1.18.04.8+esm4, 20.0.2-5ubuntu1.10+esm260
python-setuptoolsdeb3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more3.3-1ubuntu2+esm2, 20.7.0-1ubuntu0.1~esm2, 39.0.1-2ubuntu0.1+esm1, 44.0.0-2ubuntu0.1+esm139
py3-setuptoolsapk65.6.0-r0, 67.7.2-r0, 68.2.2-r0, 69.5.1-r070.3.0-r021
python-chardetrpm3.0.4-7.el80:3.0.4-19.module+el8.4.0+9822+20bf124920
python-idnarpm2.5-5.el80:2.10-3.module+el8.4.0+9822+20bf124920
python-pysocksrpm1.6.8-3.el80:1.7.1-4.module+el8.4.0+9822+20bf124920
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_80:2.25.0-2.module+el8.4.0+9822+20bf124920
python-urllib3rpm1.24.2-5.el8, 1.24.2-5.el8_6.10:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be120
python3x-setuptoolsrpm41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+548604230:50.3.2-3.module+el8.4.0+22168+8a561f05.2, 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b9
python-plyrpm3.9-9.el80:3.11-10.module+el8.4.0+9822+20bf12497
python39rpm3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.10:3.9.2-2.module+el8.4.0+20027+45e0e702.2, 0:3.9.16-1.module+el8.8.0+20025+f2100191.26
python3x-piprpm19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf12490:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c4884
python3.11-setuptoolsrpm65.5.1-2.el90:65.5.1-2.el9_4.11
python-wheelrpm0.33.6-5.module+el8.4.0+8888+89bc7e791:0.35.1-3.module+el8.4.0+15042+dc5a279b.11
OSV records
ALPINE-CVE-2024-6345DEBIAN-CVE-2024-6345GHSA-cx63-2mw6-8hw5RHSA-2024:5000RHSA-2024:5040RHSA-2024:5078RHSA-2024:5084RHSA-2024:5137RHSA-2024:5279RHSA-2024:5530RHSA-2024:5534RHSA-2024:6220RHSA-2024:6488RHSA-2024:6662UBUNTU-CVE-2024-6345RLSA-2024:5530
Also known as
BIT-setuptools-2024-6345, PYSEC-2026-1918, RHSA-2024:6907, USN-7002-1

Charts affected

986 by stars
ChartLatestAffected imagesRadar Score
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
setuptools@68.2.2
70.0.0

Open the chart page →

6,446
kibana-index-pattern-updaterkfirfer0.0.31 of 1See more

kibana-index-pattern-updater kfirfer 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kfirfer/kibana-index-pattern-updater:1.0.12e88cfcec5c93
setuptools@51.1.0
70.0.0

Open the chart page →

3,357
kube-hunterkfirfer1.0.51 of 1See more

kube-hunter kfirfer 1.0.5

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
aquasec/kube-hunter:0.6.8e64fe49f059f
setuptools@57.5.0
70.0.0

Open the chart page →

997
mysqldumpkfirfer2.8.01 of 1See more

mysqldump kfirfer 2.8.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
setuptools@68.2.2
70.0.0

Open the chart page →

3,506
scriptskfirfer0.1.361 of 1See more

scripts kfirfer 0.1.36

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kfirfer/scripts:0.0.2481e5c4e5d70e
setuptools@52.0.0
70.0.0

Open the chart page →

2,320
slackgptkfirfer0.0.61 of 1See more

slackgpt kfirfer 0.0.6

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kfirfer/slackgpt:0.0.15461331bd838e
setuptools@65.5.1
70.0.0

Open the chart page →

1,125
kimai-helmchartkimai2tet0.1.01 of 2See more

kimai-helmchart kimai2tet 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
70.0.0

Open the chart page →

1,518
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
python-pip@9.0.1-2.3~ubuntu1
python-setuptools@39.0.1-2
setuptools@39.0.1
9.0.1-2.3~ubuntu1.18.04.8+esm4
39.0.1-2ubuntu0.1+esm1
70.0.0

Open the chart page →

14,827
kubeflowkromanow94-kubeflow0.5.15 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

5 of the 30 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kubeflownotebookswg/jupyter-web-app:v1.9.2afb52057c997
setuptools@65.5.1
70.0.0
kubeflownotebookswg/tensorboards-web-app:v1.9.277f07f52a84a
setuptools@65.5.1
70.0.0
kubeflownotebookswg/volumes-web-app:v1.9.2f63c3e550af3
setuptools@65.5.1
70.0.0
library/python:3.7eedf63967cdb
setuptools@57.5.0
70.0.0
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
setuptools@57.5.0
70.0.0

Open the chart page →

68,994
lnbitskronkltdVerified publisher0.1.01 of 1See more

lnbits kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:latest26fae6327477
setuptools@65.5.1
70.0.0

Open the chart page →

1,444
specter-desktopkronkltdVerified publisher0.1.01 of 1See more

specter-desktop kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lncm/specter-desktop:v0.10.4bca14d04397d
setuptools@50.3.0
70.0.0

Open the chart page →

1,850
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
setuptools@52.0.0
70.0.0

Open the chart page →

4,230
pavkrzwiatrzyk0.0.31 of 1See more

pav krzwiatrzyk 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
witcherek7/pav:0.0.342a744f29ac0
setuptools@65.5.1
70.0.0

Open the chart page →

1,132
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
setuptools@65.5.1
70.0.0

Open the chart page →

8,455
jupyterhubkubeblocksVerified publisher0.1.02 of 7See more

jupyterhub kubeblocks 0.1.0

2 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
setuptools@65.5.1
70.0.0
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
setuptools@65.5.1
70.0.0

Open the chart page →

7,356
lokikubeblocksVerified publisher5.39.01 of 5See more

loki kubeblocks 5.39.0

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.24.35af76eebbba7
setuptools@65.5.1
70.0.0

Open the chart page →

5,841
smartfs-csi-driverkubeblocksVerified publisher0.1.21 of 6See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-3.el8_8
python-setuptools@39.2.0-7.el8
python-urllib3@1.24.2-5.el8
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-7.el8_8.1
0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
70.0.0

Open the chart page →

9,249
cephfs-csikubegems1.0.81 of 6See more

cephfs-csi kubegems 1.0.8

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.5.128a674af1df2
setuptools@39.2.0
70.0.0

Open the chart page →

4,445
juicefs-csi-driverkubegems0.19.21 of 6See more

juicefs-csi-driver kubegems 0.19.2

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.23.0d915e899e322
setuptools@57.5.0
70.0.0

Open the chart page →

4,825
kube-janitorkube-janitor0.3.31 of 1See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
hjacobs/kube-janitor:23.7.0fbb303ed463c
setuptools@65.5.1
70.0.0

Open the chart page →

3,700
pypiserverkubernetes-replicator0.0.11 of 1See more

pypiserver kubernetes-replicator 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
pypiserver/pypiserver:v1.4.2c9250d3c418d
setuptools@50.3.0
70.0.0

Open the chart page →

1,614
whatsappkubernetes-whatsappVerified publisher0.1.81 of 4See more

whatsapp kubernetes-whatsapp 0.1.8

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/python:3.8-alpine3d93b1f77efc
setuptools@57.5.0
70.0.0

Open the chart page →

1,573
gitlabkubesphereVerified publisher4.2.33 of 17See more

gitlab kubesphere 4.2.3

3 of the 17 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
mirrorgitlabcontainers/gitlab-sidekiq-ce:v13.2.294d1431683fa
setuptools@47.3.1
70.0.0
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
setuptools@47.3.1
70.0.0
mirrorgitlabcontainers/gitlab-webservice-ce:v13.2.230393f990f5c
setuptools@47.3.1
70.0.0

Open the chart page →

38,135
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
setuptools@56.0.0
70.0.0

Open the chart page →

18,394
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
python-pip@20.0.2-5ubuntu1.5
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

14,368
online-boutiquekubesphere-testVerified publisher0.1.02 of 11See more

online-boutique kubesphere-test 0.1.0

2 of the 11 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3360130ab5850
setuptools@54.1.1
70.0.0
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
setuptools@54.1.1
70.0.0

Open the chart page →

26,019
sample-bookinfokubesphere-testVerified publisher1.0.01 of 4See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kubesphere/examples-bookinfo-productpage-v1:1.13.0378f49ec9c44
setuptools@41.0.1
70.0.0

Open the chart page →

9,384
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
70.0.0

Open the chart page →

8,634
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/sdk-py:v1.20.0f108f49570cc
setuptools@65.5.1
70.0.0

Open the chart page →

20,299
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
setuptools@59.6.0
70.0.0

Open the chart page →

6,879
strimzi-kafka-operatorkvalitetsitVerified publisher0.36.11 of 1See more

strimzi-kafka-operator kvalitetsit 0.36.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.36.1e9e03b31007c
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-7.el8_8.1
70.0.0

Open the chart page →

4,097
kyso-nbdimekyso1.0.01 of 1See more

kyso-nbdime kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kyso/kyso-nbdime:latest4aa9d38ee81d
setuptools@65.5.1
70.0.0

Open the chart page →

2,765
large-systems-djangolarge-systems-djangoVerified publisher1.0.01 of 1See more

large-systems-django large-systems-django 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ha33ona/python:test6affdfc644d0
setuptools@57.5.0
70.0.0

Open the chart page →

3,891
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
setuptools@68.1.2
70.0.0

Open the chart page →

2,203
jenkinsleechistest2.7.11 of 2See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.193170069ff0976
setuptools@49.6.0
70.0.0

Open the chart page →

4,434
legendlegend0.1.21 of 1See more

legend legend 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/grofers/legend:0.1d6e901ad0ebd
setuptools@50.3.2
70.0.0

Open the chart page →

4,067
owntracks-exporterleprechaun-charts0.1.111 of 1See more

owntracks-exporter leprechaun-charts 0.1.11

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
setuptools@65.5.1
70.0.0

Open the chart page →

3,448
delugelib42Verified publisher1.3.01 of 1See more

deluge lib42 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lib42/deluge:20c4d1d326f95
setuptools@65.5.1
70.0.0

Open the chart page →

898
llm-dllm-dVerified publisher1.0.231 of 2See more

llm-d llm-d 1.0.23

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/llm-d/llm-d-model-service:v0.0.158b99a8104a2f
setuptools@53.0.0
70.0.0

Open the chart page →

2,524
lnbitslnbits0.2.11 of 1See more

lnbits lnbits 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
setuptools@65.7.0
70.0.0

Open the chart page →

1,949
weather-app-chartlocal-weatherapp0.1.01 of 4See more

weather-app-chart local-weatherapp 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
youssef11gaber10/deployment-weather-flask:latest96bce8b8b5a7
setuptools@57.5.0
70.0.0

Open the chart page →

5,905
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
locustio/locust:2.24.151d866285170
setuptools@65.5.0
70.0.0

Open the chart page →

7,516
nightingalelogic3579Verified publisher0.3.11 of 6See more

nightingale logic3579 0.3.1

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
70.0.0

Open the chart page →

9,021
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
logiqai/toolbox:2.0.155a574ec5b64
setuptools@42.0.2.post20191202
70.0.0

Open the chart page →

23,255
alert-stream-schema-registrylsst-sqre2.1.01 of 1See more

alert-stream-schema-registry lsst-sqre 2.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lsstdm/lsst_alert_packet:tickets-DM-3274374c97a490940
setuptools@57.5.0
70.0.0

Open the chart page →

2,293
alert-stream-simulatorlsst-sqre1.6.21 of 1See more

alert-stream-simulator lsst-sqre 1.6.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lsstdm/alert-stream-simulator:v1.2.1973df082d006
setuptools@57.5.0
70.0.0

Open the chart page →

2,089
exposureloglsst-sqre0.2.11 of 1See more

exposurelog lsst-sqre 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lsstsqre/exposurelog:0.8.079b00fb67a65
setuptools@60.8.2
70.0.0

Open the chart page →

2,078
kafka-aggregatorlsst-sqre0.1.21 of 1See more

kafka-aggregator lsst-sqre 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lsstsqre/kafkaaggregator:masterbe1b21060854
setuptools@54.1.2
70.0.0

Open the chart page →

3,052
narrativeloglsst-sqre0.1.01 of 1See more

narrativelog lsst-sqre 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lsstsqre/narrativelog:0.1.0ce01de04ce21
setuptools@60.9.1
70.0.0

Open the chart page →

1,638
nubladolsst-sqre0.9.233 of 5See more

nublado lsst-sqre 0.9.23

3 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
lsstsqre/prepuller:latest19c2dfc4e4ff
setuptools@56.0.0
70.0.0
lsstsqre/sciplat-hub:latest5e0ade6bed1c
setuptools@0.9.8
70.0.0
lsstsqre/wfdispatcher:lateste9feb99f524d
setuptools@39.2.0
70.0.0

Open the chart page →

5,787

Container images carrying it

1,047 by charts deploying them

A fixed version is listed for 17 of the 17 affected packages.

Container imageDigestPackageFixed inUsed by
twentycrm/twenty-postgres-spilo:latest2f78405a78be
setuptools@59.6.0-1.2ubuntu0.22.04.1
setuptools@59.6.0
59.6.0-1.2ubuntu0.22.04.2
70.0.0
1
ubcctlt/barman:v2.19cbbbbc8ae16b
setuptools@61.2.0
70.0.0
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
setuptools@56.0.0
70.0.0
1
vcnngr/telegram-login:latest1a849a997b6d
setuptools@65.5.1
70.0.0
1
vcnngr/telegram-rebot:latest30f1f05e57a6
setuptools@65.5.1
70.0.0
1
vespaengine/vespa:8.526.1569b160f58211
setuptools@39.2.0
70.0.0
1
viadee/docker-hub-rate-limit-exporter:version-1.52e27e3b3ee56
setuptools@52.0.0
70.0.0
1
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
vividplanet/swr-cache-proxy:v1ae1c5b1cbecb
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
voltha/voltha-cli:1.6.0c4e41e92f046
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@40.6.2
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
1
voltha/voltha-netconf:1.6.037f80524c207
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@20.7.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@20.7.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
1
voltha/voltha-tester:1.7.0655c3048a602
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@20.7.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
1
voltha/voltha-voltha:1.6.0ff596b62de59
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@40.6.2
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
1
wallarm/sysbindings:v0.9.9c527865df85d
setuptools@63.2.0
70.0.0
1
wazuh/wazuh-manager:4.11.11da5c38c6a78
setuptools@65.5.1
70.0.0
1
wazuh/wazuh-manager:4.4.121994f40e0da
setuptools@65.5.1
70.0.0
1
weblate/weblate:3.11.3-182848df56ecd
setuptools@40.8.0
70.0.0
1
wener/samba:4.13.39a42bae466d4
setuptools@51.3.3
70.0.0
1
wiktorn/overpass-api:latest9bb5f4a9b54c
setuptools@66.1.1
70.0.0
1
wiremind/pghoard:12-2019-11-264dea42c8166c
setuptools@40.8.0
70.0.0
1
witcherek7/pav:0.0.342a744f29ac0
setuptools@65.5.1
70.0.0
1
woojoong/wowza:latestec230db19652
python-setuptools@39.0.1-2
39.0.1-2ubuntu0.1+esm1
1
xeladock/mysql_dns:latest4baf531453f1
setuptools@59.6.0-1.2
setuptools@59.6.0
59.6.0-1.2ubuntu0.22.04.2
70.0.0
1
ygqygq2/mysql-exec-sql:latest54f30def1558
setuptools@50.3.2
70.0.0
1
youssef11gaber10/deployment-weather-flask:latest96bce8b8b5a7
setuptools@57.5.0
70.0.0
1
yugabytedb/yugabyte:2026.1.1.1-b23926eedf0ff4
setuptools@65.5.1
70.0.0
1
yugabytedb/yugabyte:2026.1.1.0-b91de2e00278645
setuptools@65.5.1
70.0.0
1
yuzutech/kroki-blockdiag:0.16.07c1917c66d96
setuptools@57.5.0
70.0.0
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
setuptools@45.2.0-1
45.2.0-1ubuntu0.2
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
setuptools@59.6.0-1.2
59.6.0-1.2ubuntu0.22.04.2
1
zammad/zammad-docker-compose:zammad-elasticsearch-4.1.0-318274d75a51fc
setuptools@39.2.0
70.0.0
1
zohardocker12/weather_app_flask:latestb86d60dbb68d
setuptools@57.0.0
70.0.0
1
zurdi15/romm:2.3.12db88fe44c89
setuptools@65.5.0
70.0.0
1
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
setuptools@65.5.1
70.0.0
1
gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3360130ab5850
setuptools@54.1.1
70.0.0
1
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
setuptools@54.1.1
70.0.0
1
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
setuptools@53.0.0
70.0.0
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
setuptools@57.5.0
70.0.0
1
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
setuptools@57.5.0
70.0.0
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
setuptools@65.5.1
70.0.0
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
setuptools@57.5.0
70.0.0
1
ghcr.io/appuio/maxscale-docker:6.4.613a01be102b0
setuptools@39.2.0
python-setuptools@39.2.0-6.el8_7.1
70.0.0
0:39.2.0-8.el8_10
1
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
setuptools@59.4.0
70.0.0
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
setuptools@66.1.1
70.0.0
1
ghcr.io/aws-exporters/prometheus-ecr-exporter:0.1.442b0c87470d6
setuptools@52.0.0
70.0.0
1
ghcr.io/aws-exporters/prometheus-inspector-exporter:0.0.29c7c11293b3c
setuptools@52.0.0
70.0.0
1
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
setuptools@69.0.2
70.0.0
1
ghcr.io/b-it-projects-gmbh/nvme_exporter:lateste70307b193c6
setuptools@58.1.0
70.0.0
1
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
setuptools@52.0.0
70.0.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.