StackRadar

CVE-2024-6345

High

Advisory

Published 15 Jul 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.019
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
979
of 17,787 indexed, latest versions
Container images
1,041
deployed by those charts
Fix available
17 of 17
affected packages

setuptools vulnerable to Command Injection via package URL

Carried by container images the latest versions of 979 of 17,787 indexed charts deploy, on 1,041 images.

Affected packageAffected versionsFixed inImages
setuptoolspypi0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+104 more70.0.0991
python-setuptoolsrpm0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+3 more0:0.9.8-7.el7_9.1, 0:39.2.0-6.el8_4.1, 0:39.2.0-7.el8_6.1, 0:39.2.0-7.el8_8.1+3 more117
setuptoolsdeb45.2.0-1, 45.2.0-1ubuntu0.1, 59.6.0-1.2, 59.6.0-1.2ubuntu0.22.04.1+2 more45.2.0-1ubuntu0.2, 59.6.0-1.2ubuntu0.22.04.2, 66.1.1-1+deb12u1, 68.1.2-2ubuntu1.1101
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+11 more1.5.4-1ubuntu4+esm5, 8.1.1-2ubuntu0.6+esm8, 9.0.1-2.3~ubuntu1.18.04.8+esm4, 20.0.2-5ubuntu1.10+esm260
python-setuptoolsdeb3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more3.3-1ubuntu2+esm2, 20.7.0-1ubuntu0.1~esm2, 39.0.1-2ubuntu0.1+esm1, 44.0.0-2ubuntu0.1+esm139
py3-setuptoolsapk65.6.0-r0, 67.7.2-r0, 68.2.2-r0, 69.5.1-r070.3.0-r021
python-chardetrpm3.0.4-7.el80:3.0.4-19.module+el8.4.0+9822+20bf124920
python-idnarpm2.5-5.el80:2.10-3.module+el8.4.0+9822+20bf124920
python-pysocksrpm1.6.8-3.el80:1.7.1-4.module+el8.4.0+9822+20bf124920
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_80:2.25.0-2.module+el8.4.0+9822+20bf124920
python-urllib3rpm1.24.2-5.el8, 1.24.2-5.el8_6.10:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be120
python3x-setuptoolsrpm41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+548604230:50.3.2-3.module+el8.4.0+22168+8a561f05.2, 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b9
python-plyrpm3.9-9.el80:3.11-10.module+el8.4.0+9822+20bf12497
python39rpm3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.10:3.9.2-2.module+el8.4.0+20027+45e0e702.2, 0:3.9.16-1.module+el8.8.0+20025+f2100191.26
python3x-piprpm19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf12490:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c4884
python3.11-setuptoolsrpm65.5.1-2.el90:65.5.1-2.el9_4.11
python-wheelrpm0.33.6-5.module+el8.4.0+8888+89bc7e791:0.35.1-3.module+el8.4.0+15042+dc5a279b.11
OSV records
ALPINE-CVE-2024-6345DEBIAN-CVE-2024-6345GHSA-cx63-2mw6-8hw5RHSA-2024:5000RHSA-2024:5040RHSA-2024:5078RHSA-2024:5084RHSA-2024:5137RHSA-2024:5279RHSA-2024:5530RHSA-2024:5534RHSA-2024:6220RHSA-2024:6488RHSA-2024:6662UBUNTU-CVE-2024-6345RLSA-2024:5530
Also known as
BIT-setuptools-2024-6345, PYSEC-2026-1918, RHSA-2024:6907, USN-7002-1

Charts affected

979 by stars
ChartLatestAffected imagesRadar Score
istio-bookinfobookinfo1.2.21 of 6See more

istio-bookinfo bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
setuptools@41.0.1
70.0.0

Open the chart page →

18,980
jenkinsbook-k8sinfra-v25.1.121 of 2See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.26.2e271016441af
setuptools@69.2.0
70.0.0

Open the chart page →

8,323
puppetboardbootcVerified publisher0.1.41 of 1See more

puppetboard bootc 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
bootc/puppetboard:1.1.0f1383295e7be
setuptools@41.2.0
70.0.0

Open the chart page →

1,292
couchpotatobryanalves0.3.01 of 1See more

couchpotato bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
setuptools@42.0.2.post20191202
70.0.0

Open the chart page →

2,018
medusabryanalves0.1.01 of 1See more

medusa bryanalves 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
linuxserver/medusa:v0.3.9-ls340a5f5114128b
setuptools@41.2.0
70.0.0

Open the chart page →

147
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
setuptools@42.0.2.post20191202
70.0.0

Open the chart page →

2,504
sickragebryanalves0.1.01 of 1See more

sickrage bryanalves 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
bryanalves/sickrage:latest42f0a130001d
setuptools@29.0.1.post20161130
70.0.0

Open the chart page →

923
frigatebryopsida0.2.11 of 2See more

frigate bryopsida 0.2.1

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.11.18330b0a265b8
setuptools@52.0.0
70.0.0

Open the chart page →

2,573
camerahubcamerahub0.10.211 of 2See more

camerahub camerahub 0.10.21

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
camerahub/camerahub:0.36.23a5af37dd6e1b
setuptools@67.7.1
70.0.0

Open the chart page →

2,507
bucket-clonercamptocamp31.0.41 of 1See more

bucket-cloner camptocamp3 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
camptocamp/bucket-cloner:latestacfafc308d88
setuptools@57.4.0
70.0.0

Open the chart page →

4,518
ekorrecamptocamp30.1.11 of 1See more

ekorre camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
camptocamp/ekorre:0.1.035c91d5fda04
setuptools@45.1.0
70.0.0

Open the chart page →

3,891
pghoardcamptocamp35.8.11 of 1See more

pghoard camptocamp3 5.8.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
camptocamp/pghoard:10bff736b15623
setuptools@33.1.1
70.0.0

Open the chart page →

2,813
prometheus-operatorcamptocamp35.15.11 of 5See more

prometheus-operator camptocamp3 5.15.1

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
setuptools@40.8.0
70.0.0

Open the chart page →

2,490
snow-webhookcamptocamp31.0.01 of 1See more

snow-webhook camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
camptocamp/snow-webhook:latest2924b43dbf40
setuptools@40.8.0
70.0.0

Open the chart page →

1,310
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.26.237e2e33dbd7b
setuptools@65.5.0
70.0.0

Open the chart page →

16,198
tsoragecetic0.4.111 of 8See more

tsorage cetic 0.4.11

1 of the 8 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:5.0.1c87b1c07fb53
setuptools@40.5.0
70.0.0

Open the chart page →

12,018
pypi-servercgsimmons0.1.01 of 1See more

pypi-server cgsimmons 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
pypiserver/pypiserver:v1.3.2303ac89b2aa2
setuptools@44.0.0
70.0.0

Open the chart page →

506
ctk-walkthroughchaostoolkit-walkthrough0.1.03 of 3See more

ctk-walkthrough chaostoolkit-walkthrough 0.1.0

3 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
chaostoolkit/back:latest734f3af86125
setuptools@50.3.2
70.0.0
chaostoolkit/front:latest7f4a7eb9f7df
setuptools@50.3.2
70.0.0
chaostoolkit/middle:latestb95ba4961cfc
setuptools@50.3.2
70.0.0

Open the chart page →

5,557
otbrcharts-derwitt-devVerified publisher0.2.01 of 1See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
openthread/otbr:latestf307f59f6432
python-setuptools@39.0.1-2ubuntu0.1
39.0.1-2ubuntu0.1+esm1

Open the chart page →

12,779
chat-searchchat-searchVerified publisher0.1.71 of 1See more

chat-search chat-search 0.1.7

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/hemslo/chat-search:latest39d48995a5bd
setuptools@65.5.1
70.0.0

Open the chart page →

4,042
opensipschetan-opensips0.1.01 of 1See more

opensips chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
chetangautamm/repo:Opensips_Buildb4b94155ff5a
python-setuptools@3.3-1ubuntu2
3.3-1ubuntu2+esm2

Open the chart page →

30,140
sippchetan-opensips0.1.01 of 1See more

sipp chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
chetangautamm/repo:sipp.v3e7f7049e1544
setuptools@45.2.0-1
45.2.0-1ubuntu0.2

Open the chart page →

12,483
countlychristianhuthVerified publisher5.2.12 of 3See more

countly christianhuth 5.2.1

2 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
countly/api:25.05.4f4cc7447c4f5
setuptools@56.0.0
70.0.0
countly/frontend:25.05.42acbc11499b6
setuptools@56.0.0
70.0.0

Open the chart page →

7,295
kube-ops-viewchristianhuthVerified publisher8.3.31 of 1See more

kube-ops-view christianhuth 8.3.3

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:23.5.0a4fae38f93d7
setuptools@65.5.1
70.0.0

Open the chart page →

1,227
polrchristianhuthVerified publisher4.3.01 of 2See more

polr christianhuth 4.3.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ajanvier/polr:2.3.091ac61b88c85
setuptools@51.3.3
70.0.0

Open the chart page →

5,904
syncserverchristianhuthVerified publisher1.3.01 of 1See more

syncserver christianhuth 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
mozilla/syncserver:latest016162bf39d8
setuptools@44.1.0
70.0.0

Open the chart page →

1,382
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
setuptools@59.6.0
70.0.0

Open the chart page →

20,900
check-mkcloudnativeapp0.2.11 of 1See more

check-mk cloudnativeapp 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
nlmacamp/check_mk:latest5dbb8589f824
setuptools@40.6.2
70.0.0

Open the chart page →

2,408
couchdbcloudnativeapp1.1.31 of 3See more

couchdb cloudnativeapp 1.1.3

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kocolosk/couchdb-statefulset-assembler:1.2.06effb982154e
setuptools@38.2.3
70.0.0

Open the chart page →

2,110
daskcloudnativeapp2.2.12 of 2See more

dask cloudnativeapp 2.2.1

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
daskdev/dask:1.1.04ecd7bc35500
setuptools@40.2.0
70.0.0
daskdev/dask-notebook:1.1.0052630f5ca04
setuptools@40.6.3
70.0.0

Open the chart page →

29,901
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
setuptools@38.5.1
70.0.0

Open the chart page →

36,094
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
python-setuptools@20.7.0-1
20.7.0-1ubuntu0.1~esm2

Open the chart page →

27,417
k8s-spot-termination-handlercloudnativeapp1.2.11 of 1See more

k8s-spot-termination-handler cloudnativeapp 1.2.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kubeaws/kube-spot-termination-notice-handler:1.13.0-1c9cd2ba4373a
setuptools@40.8.0
70.0.0

Open the chart page →

2,095
kube-huntercloudnativeapp1.0.21 of 1See more

kube-hunter cloudnativeapp 1.0.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
aquasec/kube-hunter:1950bf607ce9308
setuptools@40.6.2
70.0.0

Open the chart page →

1,305
locustcloudnativeapp1.0.01 of 1See more

locust cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
greenbirdit/locust:0.9.0e99d53bdc944
setuptools@40.6.3
70.0.0

Open the chart page →

1,352
prometheus-operatorcloudnativeapp6.4.01 of 7See more

prometheus-operator cloudnativeapp 6.4.0

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.186eb52513d59e
setuptools@41.0.1
70.0.0

Open the chart page →

2,954
seleniumcloudnativeapp1.0.81 of 1See more

selenium cloudnativeapp 1.0.8

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
setuptools@45.2.0-1
45.2.0-1ubuntu0.2

Open the chart page →

11,782
sentry-kubernetescloudnativeapp0.2.01 of 1See more

sentry-kubernetes cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
getsentry/sentry-kubernetes:latest6ac37974fd2a
setuptools@40.8.0
70.0.0

Open the chart page →

1,415
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
setuptools@40.8.0
70.0.0

Open the chart page →

5,060
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@20.7.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

77,758
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-ply@3.9-9.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-7.el8
python-urllib3@1.24.2-5.el8
python3x-pip@19.3.1-6.module+el8.7.0+15823+8950cfa7
python3x-setuptools@41.6.0-5.module+el8.5.0+12205+a865257a
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:3.11-10.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-7.el8_8.1
0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
0:20.2.4-7.module+el8.6.0+13003+6bb2c488
0:50.3.2-6.module+el8.8.0+22158+89b6fb7b
70.0.0

Open the chart page →

25,151
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
python-setuptools@39.2.0-5.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

25,456
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
setuptools@51.3.3
70.0.0

Open the chart page →

6,695
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
setuptools@59.4.0
70.0.0

Open the chart page →

6,921
robot-shopcloud-native-toolkit1.1.11 of 12See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
robotshop/rs-payment:latest774b52c6180d
setuptools@57.4.0
70.0.0

Open the chart page →

29,555
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

12,457
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

12,131
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

11,592
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

16,069
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
python-pip@1.5.4-1ubuntu4
python-setuptools@3.3-1ubuntu2
setuptools@36.5.0.post20170921
1.5.4-1ubuntu4+esm5
3.3-1ubuntu2+esm2
70.0.0
galaxy/galaxy-stable:v18.018e577a626dfd
python-pip@1.5.4-1ubuntu4
python-setuptools@3.3-1ubuntu2
setuptools@39.2.0
1.5.4-1ubuntu4+esm5
3.3-1ubuntu2+esm2
70.0.0

Open the chart page →

70,895

Container images carrying it

1,041 by charts deploying them

A fixed version is listed for 17 of the 17 affected packages.

Container imageDigestPackageFixed inUsed by
vcnngr/telegram-login:latest1a849a997b6d
setuptools@65.5.1
70.0.0
1
vcnngr/telegram-rebot:latest30f1f05e57a6
setuptools@65.5.1
70.0.0
1
vespaengine/vespa:8.526.1569b160f58211
setuptools@39.2.0
70.0.0
1
viadee/docker-hub-rate-limit-exporter:version-1.52e27e3b3ee56
setuptools@52.0.0
70.0.0
1
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
vividplanet/swr-cache-proxy:v1ae1c5b1cbecb
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
voltha/voltha-cli:1.6.0c4e41e92f046
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@40.6.2
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
1
voltha/voltha-netconf:1.6.037f80524c207
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@20.7.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@20.7.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
1
voltha/voltha-tester:1.7.0655c3048a602
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@20.7.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
1
voltha/voltha-voltha:1.6.0ff596b62de59
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@40.6.2
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
1
wallarm/sysbindings:v0.9.9c527865df85d
setuptools@63.2.0
70.0.0
1
wazuh/wazuh-manager:4.11.11da5c38c6a78
setuptools@65.5.1
70.0.0
1
wazuh/wazuh-manager:4.4.121994f40e0da
setuptools@65.5.1
70.0.0
1
weblate/weblate:3.11.3-182848df56ecd
setuptools@40.8.0
70.0.0
1
wener/samba:4.13.39a42bae466d4
setuptools@51.3.3
70.0.0
1
wiktorn/overpass-api:latest9bb5f4a9b54c
setuptools@66.1.1
70.0.0
1
wiremind/pghoard:12-2019-11-264dea42c8166c
setuptools@40.8.0
70.0.0
1
witcherek7/pav:0.0.342a744f29ac0
setuptools@65.5.1
70.0.0
1
woojoong/wowza:latestec230db19652
python-setuptools@39.0.1-2
39.0.1-2ubuntu0.1+esm1
1
xeladock/mysql_dns:latest4baf531453f1
setuptools@59.6.0-1.2
setuptools@59.6.0
59.6.0-1.2ubuntu0.22.04.2
70.0.0
1
ygqygq2/mysql-exec-sql:latest54f30def1558
setuptools@50.3.2
70.0.0
1
youssef11gaber10/deployment-weather-flask:latest96bce8b8b5a7
setuptools@57.5.0
70.0.0
1
yugabytedb/yugabyte:2026.1.1.1-b23926eedf0ff4
setuptools@65.5.1
70.0.0
1
yugabytedb/yugabyte:2026.1.1.0-b91de2e00278645
setuptools@65.5.1
70.0.0
1
yuzutech/kroki-blockdiag:0.16.07c1917c66d96
setuptools@57.5.0
70.0.0
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
setuptools@45.2.0-1
45.2.0-1ubuntu0.2
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
setuptools@59.6.0-1.2
59.6.0-1.2ubuntu0.22.04.2
1
zammad/zammad-docker-compose:zammad-elasticsearch-4.1.0-318274d75a51fc
setuptools@39.2.0
70.0.0
1
zohardocker12/weather_app_flask:latestb86d60dbb68d
setuptools@57.0.0
70.0.0
1
zurdi15/romm:2.3.12db88fe44c89
setuptools@65.5.0
70.0.0
1
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
setuptools@65.5.1
70.0.0
1
gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3360130ab5850
setuptools@54.1.1
70.0.0
1
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
setuptools@54.1.1
70.0.0
1
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
setuptools@53.0.0
70.0.0
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
setuptools@57.5.0
70.0.0
1
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
setuptools@57.5.0
70.0.0
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
setuptools@65.5.1
70.0.0
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
setuptools@57.5.0
70.0.0
1
ghcr.io/appuio/maxscale-docker:6.4.613a01be102b0
setuptools@39.2.0
python-setuptools@39.2.0-6.el8_7.1
70.0.0
0:39.2.0-8.el8_10
1
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
setuptools@59.4.0
70.0.0
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
setuptools@66.1.1
70.0.0
1
ghcr.io/aws-exporters/prometheus-ecr-exporter:0.1.442b0c87470d6
setuptools@52.0.0
70.0.0
1
ghcr.io/aws-exporters/prometheus-inspector-exporter:0.0.29c7c11293b3c
setuptools@52.0.0
70.0.0
1
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
setuptools@69.0.2
70.0.0
1
ghcr.io/b-it-projects-gmbh/nvme_exporter:lateste70307b193c6
setuptools@58.1.0
70.0.0
1
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
setuptools@52.0.0
70.0.0
1
ghcr.io/blakeblackshear/frigate:0.13.07a5244e4c8dc
setuptools@52.0.0
70.0.0
1
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
setuptools@52.0.0
70.0.0
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
setuptools@45.2.0-1ubuntu0.1
45.2.0-1ubuntu0.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.