StackRadar

CVE-2024-6345

High

Advisory

Published 15 Jul 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.019
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
979
of 17,787 indexed, latest versions
Container images
1,041
deployed by those charts
Fix available
17 of 17
affected packages

setuptools vulnerable to Command Injection via package URL

Carried by container images the latest versions of 979 of 17,787 indexed charts deploy, on 1,041 images.

Affected packageAffected versionsFixed inImages
setuptoolspypi0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+104 more70.0.0991
python-setuptoolsrpm0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+3 more0:0.9.8-7.el7_9.1, 0:39.2.0-6.el8_4.1, 0:39.2.0-7.el8_6.1, 0:39.2.0-7.el8_8.1+3 more117
setuptoolsdeb45.2.0-1, 45.2.0-1ubuntu0.1, 59.6.0-1.2, 59.6.0-1.2ubuntu0.22.04.1+2 more45.2.0-1ubuntu0.2, 59.6.0-1.2ubuntu0.22.04.2, 66.1.1-1+deb12u1, 68.1.2-2ubuntu1.1101
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+11 more1.5.4-1ubuntu4+esm5, 8.1.1-2ubuntu0.6+esm8, 9.0.1-2.3~ubuntu1.18.04.8+esm4, 20.0.2-5ubuntu1.10+esm260
python-setuptoolsdeb3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more3.3-1ubuntu2+esm2, 20.7.0-1ubuntu0.1~esm2, 39.0.1-2ubuntu0.1+esm1, 44.0.0-2ubuntu0.1+esm139
py3-setuptoolsapk65.6.0-r0, 67.7.2-r0, 68.2.2-r0, 69.5.1-r070.3.0-r021
python-chardetrpm3.0.4-7.el80:3.0.4-19.module+el8.4.0+9822+20bf124920
python-idnarpm2.5-5.el80:2.10-3.module+el8.4.0+9822+20bf124920
python-pysocksrpm1.6.8-3.el80:1.7.1-4.module+el8.4.0+9822+20bf124920
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_80:2.25.0-2.module+el8.4.0+9822+20bf124920
python-urllib3rpm1.24.2-5.el8, 1.24.2-5.el8_6.10:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be120
python3x-setuptoolsrpm41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+548604230:50.3.2-3.module+el8.4.0+22168+8a561f05.2, 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b9
python-plyrpm3.9-9.el80:3.11-10.module+el8.4.0+9822+20bf12497
python39rpm3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.10:3.9.2-2.module+el8.4.0+20027+45e0e702.2, 0:3.9.16-1.module+el8.8.0+20025+f2100191.26
python3x-piprpm19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf12490:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c4884
python3.11-setuptoolsrpm65.5.1-2.el90:65.5.1-2.el9_4.11
python-wheelrpm0.33.6-5.module+el8.4.0+8888+89bc7e791:0.35.1-3.module+el8.4.0+15042+dc5a279b.11
OSV records
ALPINE-CVE-2024-6345DEBIAN-CVE-2024-6345GHSA-cx63-2mw6-8hw5RHSA-2024:5000RHSA-2024:5040RHSA-2024:5078RHSA-2024:5084RHSA-2024:5137RHSA-2024:5279RHSA-2024:5530RHSA-2024:5534RHSA-2024:6220RHSA-2024:6488RHSA-2024:6662UBUNTU-CVE-2024-6345RLSA-2024:5530
Also known as
BIT-setuptools-2024-6345, PYSEC-2026-1918, RHSA-2024:6907, USN-7002-1

Charts affected

979 by stars
ChartLatestAffected imagesRadar Score
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
setuptools@58.1.0
70.0.0

Open the chart page →

11,367
rook-cephrookOfficialVerified publisher1.20.71 of 2See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
rook/ceph:v1.20.72f970c425617
setuptools@69.2.0
70.0.0

Open the chart page →

1,447
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

7,713
ceph-csi-cephfsceph-csiOfficialVerified publisher3.17.11 of 6See more

ceph-csi-cephfs ceph-csi 3.17.1

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
setuptools@69.2.0
70.0.0

Open the chart page →

4,061
ceph-csi-rbdceph-csiOfficialVerified publisher3.17.11 of 6See more

ceph-csi-rbd ceph-csi 3.17.1

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
setuptools@69.2.0
70.0.0

Open the chart page →

4,061
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
setuptools@63.4.2
70.0.0

Open the chart page →

9,145
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

32,259
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
setuptools@66.1.1-1
setuptools@66.1.1
66.1.1-1+deb12u1
70.0.0

Open the chart page →

10,622
locustdeliveryheroVerified publisher0.35.01 of 1See more

locust deliveryhero 0.35.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
setuptools@65.5.1
70.0.0

Open the chart page →

2,800
nacosygqygq2Verified publisher2.1.101 of 4See more

nacos ygqygq2 2.1.10

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ygqygq2/mysql-exec-sql:latest54f30def1558
setuptools@50.3.2
70.0.0

Open the chart page →

4,983
difydoubanVerified publisher0.10.02 of 6See more

dify douban 0.10.0

2 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
setuptools@68.1.2
70.0.0
langgenius/dify-sandbox:0.2.124e65e8a351a2
setuptools@65.5.1
70.0.0

Open the chart page →

19,391
stackgres-operatorstackgres-chartsOfficialVerified publisher1.19.12 of 2See more

stackgres-operator stackgres-charts 1.19.1

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/ongres/kubectl:v1.25.16-build-6.5304dada9e4503
setuptools@68.2.2
70.0.0
quay.io/stackgres/operator:1.19.1f241b0b20326
setuptools@68.2.2
70.0.0

Open the chart page →

2,119
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
setuptools@68.1.2
70.0.0

Open the chart page →

22,002
ambassadordatawire6.9.51 of 2See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
setuptools@50.3.2
70.0.0

Open the chart page →

4,086
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
setuptools@66.1.1
70.0.0

Open the chart page →

11,384
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
setuptools@59.6.0-1.2
59.6.0-1.2ubuntu0.22.04.2

Open the chart page →

33,725
emissary-ingressdatawire7.1.8-ea1 of 1See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
datawire/emissary:2.0.2-ea9716efbdd24b
setuptools@50.3.2
70.0.0

Open the chart page →

4,918
kube-downscalerdeliveryheroVerified publisher0.7.61 of 1See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
setuptools@65.5.1
70.0.0

Open the chart page →

4,293
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
setuptools@60.8.1
70.0.0

Open the chart page →

7,705
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
setuptools@67.6.0
70.0.0

Open the chart page →

6,543
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
setuptools@65.5.0
70.0.0

Open the chart page →

5,987
pypiservercommunity-chartsVerified publisher0.1.91 of 1See more

pypiserver community-charts 0.1.9

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
pypiserver/pypiserver:v2.4.1e935e19433ef
setuptools@65.5.1
70.0.0

Open the chart page →

584
daskdask2024.1.12 of 2See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/dask/dask:2024.1.0080150de7d86
setuptools@68.1.2
70.0.0
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
setuptools@69.0.3
70.0.0

Open the chart page →

12,746
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
python-setuptools@39.0.1-2
39.0.1-2ubuntu0.1+esm1

Open the chart page →

15,592
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
setuptools@68.2.2
70.0.0

Open the chart page →

6,041
yugabyteyugabyteVerified publisher2026.1.11 of 1See more

yugabyte yugabyte 2026.1.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
yugabytedb/yugabyte:2026.1.1.1-b23926eedf0ff4
setuptools@65.5.1
70.0.0

Open the chart page →

351
edge-stackdatawire7.1.8-ea1 of 2See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
datawire/aes:2.0.3-ea07f8fe4f4f8e
setuptools@50.3.2
70.0.0

Open the chart page →

5,173
milvusmilvus-helm5.0.281See more

milvus milvus-helm 5.0.28

1 container image this version deploys carries CVE-2024-6345.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
setuptools@59.6.0
70.0.0

Open the chart page →

—
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
setuptools@45.2.0-1
45.2.0-1ubuntu0.2

Open the chart page →

18,509
apicurio-registryapicurio-registry-helmVerified publisher3.8.01 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

6,675
supersetcloudposse1.2.01 of 1See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
setuptools@44.0.0
70.0.0

Open the chart page →

5,851
servarrkubitodevVerified publisher1.5.21 of 10See more

servarr kubitodev 1.5.2

1 of the 10 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.3.21f104ee51e512
setuptools@65.5.1
70.0.0

Open the chart page →

3,004
stackstorm-hastackstormVerified publisher1.1.011 of 17See more

stackstorm-ha stackstorm 1.1.0

11 of the 17 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
stackstorm/st2api:3.86f56d239d280
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
stackstorm/st2auth:3.833ecfda16608
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
stackstorm/st2notifier:3.8f190a6212195
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
stackstorm/st2rulesengine:3.8259503496ff9
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
stackstorm/st2scheduler:3.8b1de2055c362
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
stackstorm/st2sensorcontainer:3.8b1a338f64773
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
stackstorm/st2stream:3.81c8904a3bf67
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
stackstorm/st2timersengine:3.81bf35bfaf00c
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0
stackstorm/st2workflowengine:3.819fdfffdbba8
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

96,419
frigateblakeblackshear7.8.01 of 1See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
setuptools@52.0.0
70.0.0

Open the chart page →

3,004
kube-prometheuschoerodon9.3.11 of 7See more

kube-prometheus choerodon 9.3.1

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.1517b98eecdf6d1
setuptools@46.1.3
70.0.0

Open the chart page →

12,237
openclawopenclawVerified publisher1.91.31 of 2See more

openclaw openclaw 1.91.3

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
setuptools@68.1.2
70.0.0

Open the chart page →

2,977
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
setuptools@47.3.1
70.0.0
dbanda/spark:2.4.6d0e6367876ae
setuptools@47.3.1
70.0.0

Open the chart page →

13,738
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
setuptools@49.2.0
70.0.0

Open the chart page →

30,326
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
openmined/syft-seaweedfs:0.9.53a4144c0bb82
py3-setuptools@68.2.2-r0
setuptools@68.2.2
70.3.0-r0
70.0.0

Open the chart page →

17,245
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
setuptools@45.2.0-1
45.2.0-1ubuntu0.2

Open the chart page →

11,782
barmanadfinisVerified publisher0.10.01 of 1See more

barman adfinis 0.10.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ubcctlt/barman:v2.19cbbbbc8ae16b
setuptools@61.2.0
70.0.0

Open the chart page →

1,552
zabbix-serveraekondratievVerified publisher1.0.61 of 4See more

zabbix-server aekondratiev 1.0.6

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
setuptools@45.2.0-1
45.2.0-1ubuntu0.2

Open the chart page →

30,668
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
setuptools@66.1.1
70.0.0

Open the chart page →

6,457
awx-operatorawx-operator-helm3.2.11 of 2See more

awx-operator awx-operator-helm 3.2.1

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

9,868
codercoderOfficialVerified publisher1.44.62 of 2See more

coder coder 1.44.6

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
coderenvs/coder-service:1.44.61deffc4670e6
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
coderenvs/timescale:1.44.676fd37fe6830
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

6,849
invoiceninjainvoiceninjaVerified publisher0.10.21 of 5See more

invoiceninja invoiceninja 0.10.2

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
invoiceninja/invoiceninja:5.6.241437916dee01
py3-setuptools@67.7.2-r0
setuptools@67.7.2
70.3.0-r0
70.0.0

Open the chart page →

2,709
pmmpercona1.9.11 of 1See more

pmm percona 1.9.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
percona/pmm-server:3.9.1003f9c25f842
setuptools@53.0.0
70.0.0

Open the chart page →

790
servarrservarr1.0.23 of 10See more

servarr servarr 1.0.2

3 of the 10 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
dinutac/jinja2docker:2.1.89340dde8a8a4
py3-setuptools@68.2.2-r0
setuptools@68.2.2
70.3.0-r0
70.0.0
nyurik/alpine-python3-requests:lateste0553236e3eb
setuptools@57.1.0
70.0.0
ghcr.io/flaresolverr/flaresolverr:v3.3.16088412db1051
setuptools@65.5.1
70.0.0

Open the chart page →

14,238
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.11.11da5c38c6a78
setuptools@65.5.1
70.0.0

Open the chart page →

6,168
fadicetic0.3.14 of 25See more

fadi cetic 0.3.1

4 of the 25 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
setuptools@44.0.0
70.0.0
ceticasbl/pg-ldap-sync:latest6c0aa7567145
setuptools@40.8.0
70.0.0
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
python-pip@20.0.2-5ubuntu1.1
setuptools@45.2.0-1
setuptools@51.1.2
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
setuptools@49.6.0.post20201009
70.0.0

Open the chart page →

52,919

Container images carrying it

1,041 by charts deploying them

A fixed version is listed for 17 of the 17 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
setuptools@68.1.2
70.0.0
1
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
setuptools@68.1.2
70.0.0
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
setuptools@68.1.2
70.0.0
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
setuptools@66.1.1
70.0.0
1
ghcr.io/cloudnative-pg/postgresql:18899d3ed526b6
setuptools@52.0.0
70.0.0
1
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
setuptools@52.0.0
70.0.0
1
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
setuptools@47.0.0
70.0.0
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-6.el8_4.1
0:1.25.10-3.module+el8.4.0+9822+20bf1249
70.0.0
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-6.el8_4.1
0:1.25.10-3.module+el8.4.0+9822+20bf1249
70.0.0
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-6.el8_4.1
0:1.25.10-3.module+el8.4.0+9822+20bf1249
70.0.0
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-6.el8_4.1
0:1.25.10-3.module+el8.4.0+9822+20bf1249
70.0.0
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-6.el8_4.1
0:1.25.10-3.module+el8.4.0+9822+20bf1249
70.0.0
1
ghcr.io/cunningpike/fediblockhole:0.4.22abc5f0350dc
setuptools@65.5.1
70.0.0
1
ghcr.io/dask/dask:2024.1.0080150de7d86
setuptools@68.1.2
70.0.0
1
ghcr.io/dask/dask-gateway-server:2024.1.0881e7acfc5a0
setuptools@65.5.1
70.0.0
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
setuptools@69.0.3
70.0.0
1
ghcr.io/dgtlmoon/changedetection.io:0.39.4f1ce4c56ccaa
setuptools@57.5.0
70.0.0
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
setuptools@68.1.2
70.0.0
1
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
setuptools@58.1.0
70.0.0
1
ghcr.io/dodevops/azure-app-exporter/azure-app-exporter:0.1.38b472877847f5
setuptools@58.1.0
70.0.0
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
setuptools@65.5.1
70.0.0
1
ghcr.io/dynamia-ai/hami-enterprise:v2.10.0-r0-openshift.c4e22e88745504757300
setuptools@39.2.0
70.0.0
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
setuptools@67.6.0
70.0.0
1
ghcr.io/eshepelyuk/dckr/cmak2zk:1.2.022de6314c31e
setuptools@57.5.0
70.0.0
1
ghcr.io/eugenmayer/nist-data-mirror:0.1.1a2162df94729
py3-setuptools@65.6.0-r0
setuptools@65.6.0
70.3.0-r0
70.0.0
1
ghcr.io/facebook/threatexchange/hma:1.0.1784d09c6b75a7
setuptools@65.5.1
70.0.0
1
ghcr.io/flaresolverr/flaresolverr:v3.3.16088412db1051
setuptools@65.5.1
70.0.0
1
ghcr.io/flaresolverr/flaresolverr:v3.3.21f104ee51e512
setuptools@65.5.1
70.0.0
1
ghcr.io/g0dscookie/icinga2:2.13.5da81246ccfc9
setuptools@52.0.0
70.0.0
1
ghcr.io/grofers/legend:0.1d6e901ad0ebd
setuptools@50.3.2
70.0.0
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
python-setuptools@44.0.0-2
setuptools@45.2.0-1
44.0.0-2ubuntu0.1+esm1
45.2.0-1ubuntu0.2
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
setuptools@65.5.1
70.0.0
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
setuptools@60.8.1
70.0.0
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
setuptools@68.2.2
70.0.0
1
ghcr.io/ideamixes/object-cloner:2.0.031030fd2f192
setuptools@65.5.1
70.0.0
1
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
setuptools@65.5.1
70.0.0
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
setuptools@66.1.1
70.0.0
1
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
python-setuptools@53.0.0-12.el9
setuptools@53.0.0
0:53.0.0-12.el9_4.1
70.0.0
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
python-setuptools@39.2.0-5.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
setuptools@60.9.3
70.0.0
1
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.2
70.0.0
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
setuptools@45.2.0
70.0.0
1
ghcr.io/kubeshop/k8s-sidecar:ignore-initial-events7f583a36a764
setuptools@65.4.0
70.0.0
1
ghcr.io/kubiyabot/sdk-py:v1.20.0f108f49570cc
setuptools@65.5.1
70.0.0
1
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
setuptools@57.5.0
70.0.0
1
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
setuptools@65.5.1
70.0.0
1
ghcr.io/libretime/libretime-analyzer:latest3d5e236216ad
setuptools@65.5.1
70.0.0
1
ghcr.io/libretime/libretime-api:latesteae026cc8909
setuptools@65.5.1
70.0.0
1
ghcr.io/libretime/libretime-playout:latest71a8706531aa
setuptools@65.5.1
70.0.0
1
ghcr.io/libretime/libretime-worker:latestd39ff5272b2e
setuptools@65.5.1
70.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.