StackRadar

CVE-2024-6345

High

Advisory

Published 15 Jul 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.019
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
986
of 17,787 indexed, latest versions
Container images
1,047
deployed by those charts
Fix available
17 of 17
affected packages

setuptools vulnerable to Command Injection via package URL

Carried by container images the latest versions of 986 of 17,787 indexed charts deploy, on 1,047 images.

Affected packageAffected versionsFixed inImages
setuptoolspypi0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+104 more70.0.0997
python-setuptoolsrpm0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+3 more0:0.9.8-7.el7_9.1, 0:39.2.0-6.el8_4.1, 0:39.2.0-7.el8_6.1, 0:39.2.0-7.el8_8.1+3 more117
setuptoolsdeb45.2.0-1, 45.2.0-1ubuntu0.1, 59.6.0-1.2, 59.6.0-1.2ubuntu0.22.04.1+2 more45.2.0-1ubuntu0.2, 59.6.0-1.2ubuntu0.22.04.2, 66.1.1-1+deb12u1, 68.1.2-2ubuntu1.1102
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+11 more1.5.4-1ubuntu4+esm5, 8.1.1-2ubuntu0.6+esm8, 9.0.1-2.3~ubuntu1.18.04.8+esm4, 20.0.2-5ubuntu1.10+esm260
python-setuptoolsdeb3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more3.3-1ubuntu2+esm2, 20.7.0-1ubuntu0.1~esm2, 39.0.1-2ubuntu0.1+esm1, 44.0.0-2ubuntu0.1+esm139
py3-setuptoolsapk65.6.0-r0, 67.7.2-r0, 68.2.2-r0, 69.5.1-r070.3.0-r021
python-chardetrpm3.0.4-7.el80:3.0.4-19.module+el8.4.0+9822+20bf124920
python-idnarpm2.5-5.el80:2.10-3.module+el8.4.0+9822+20bf124920
python-pysocksrpm1.6.8-3.el80:1.7.1-4.module+el8.4.0+9822+20bf124920
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_80:2.25.0-2.module+el8.4.0+9822+20bf124920
python-urllib3rpm1.24.2-5.el8, 1.24.2-5.el8_6.10:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be120
python3x-setuptoolsrpm41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+548604230:50.3.2-3.module+el8.4.0+22168+8a561f05.2, 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b9
python-plyrpm3.9-9.el80:3.11-10.module+el8.4.0+9822+20bf12497
python39rpm3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.10:3.9.2-2.module+el8.4.0+20027+45e0e702.2, 0:3.9.16-1.module+el8.8.0+20025+f2100191.26
python3x-piprpm19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf12490:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c4884
python3.11-setuptoolsrpm65.5.1-2.el90:65.5.1-2.el9_4.11
python-wheelrpm0.33.6-5.module+el8.4.0+8888+89bc7e791:0.35.1-3.module+el8.4.0+15042+dc5a279b.11
OSV records
ALPINE-CVE-2024-6345DEBIAN-CVE-2024-6345GHSA-cx63-2mw6-8hw5RHSA-2024:5000RHSA-2024:5040RHSA-2024:5078RHSA-2024:5084RHSA-2024:5137RHSA-2024:5279RHSA-2024:5530RHSA-2024:5534RHSA-2024:6220RHSA-2024:6488RHSA-2024:6662UBUNTU-CVE-2024-6345RLSA-2024:5530
Also known as
BIT-setuptools-2024-6345, PYSEC-2026-1918, RHSA-2024:6907, USN-7002-1

Charts affected

986 by stars
ChartLatestAffected imagesRadar Score
netbirdnetbird1.9.01 of 4See more

netbird netbird 1.9.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
netbirdio/dashboard:v2.13.188b5fb704a8c
setuptools@52.0.0
70.0.0

Open the chart page →

6,367
neuralbank-stackneuralbank-stack0.1.01 of 4See more

neuralbank-stack neuralbank-stack 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuralbank-frontend:latest5f4572ef6d6f
setuptools@53.0.0
70.0.0

Open the chart page →

5,198
neurofaceneurofaceVerified publisher1.4.22 of 3See more

neuroface neuroface 1.4.2

2 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuroface-backend:v1.4.13194d46df0f9
setuptools@53.0.0
70.0.0
quay.io/maximilianopizarro/neuroface-frontend:v1.4.1841b70cd1424
setuptools@53.0.0
70.0.0

Open the chart page →

7,413
nfl-walletnfl-walletVerified publisher0.1.31 of 4See more

nfl-wallet nfl-wallet 0.1.3

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/nfl-wallet-webapp:1.0.13fead5702be7
setuptools@39.2.0
70.0.0

Open the chart page →

13,047
node-debug-dashboardnode-debug-dashboardVerified publisher0.3.21 of 1See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
setuptools@66.1.1
70.0.0

Open the chart page →

6,861
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

22,713
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
python-setuptools@3.3-1ubuntu1
3.3-1ubuntu2+esm2

Open the chart page →

41,455
notification-componentnotification-component1.0.01 of 4See more

notification-component notification-component 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
setuptools@47.0.0
70.0.0

Open the chart page →

7,527
nexus2novum-rgi-charts0.1.11 of 1See more

nexus2 novum-rgi-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
sonatype/nexus:oss6bc88b51d4d7
python-setuptools@0.9.8-7.el7
setuptools@0.9.8
0:0.9.8-7.el7_9.1
70.0.0

Open the chart page →

3,219
nfs-server-provisionernovum-rgi-charts1.1.21 of 1See more

nfs-server-provisioner novum-rgi-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
setuptools@40.8.0
70.0.0

Open the chart page →

2,806
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
python-pip@9.0.1-2.3~ubuntu1.18.04.1
python-setuptools@39.0.1-2
setuptools@44.0.0
9.0.1-2.3~ubuntu1.18.04.8+esm4
39.0.1-2ubuntu0.1+esm1
70.0.0

Open the chart page →

27,667
object-clonerobject-clonerVerified publisher2.0.01 of 1See more

object-cloner object-cloner 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/ideamixes/object-cloner:2.0.031030fd2f192
setuptools@65.5.1
70.0.0

Open the chart page →

1,587
kuttleokgoloveVerified publisher2.0.01 of 1See more

kuttle okgolove 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/python:3.7-alpinef3d31c8677d0
setuptools@57.5.0
70.0.0

Open the chart page →

797
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
setuptools@59.6.0-1.2ubuntu0.22.04.1
setuptools@59.6.0
59.6.0-1.2ubuntu0.22.04.2
70.0.0

Open the chart page →

9,059
apicurioone-acre-fundVerified publisher2.3.03 of 5See more

apicurio one-acre-fund 2.3.0

3 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-7.el8_8.1
70.0.0
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-7.el8_8.1
70.0.0
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-7.el8_8.1
70.0.0

Open the chart page →

18,666
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
vespaengine/vespa:8.526.1569b160f58211
setuptools@39.2.0
70.0.0

Open the chart page →

6,252
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
python-wheel@0.33.6-5.module+el8.4.0+8888+89bc7e79
python3x-pip@19.3.1-1.module+el8.4.0+8888+89bc7e79
python3x-setuptools@41.6.0-4.module+el8.4.0+8888+89bc7e79
setuptools@41.6.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-6.el8_4.1
0:1.25.10-3.module+el8.4.0+9822+20bf1249
1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1
0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1
0:50.3.2-3.module+el8.4.0+22168+8a561f05.2
70.0.0

Open the chart page →

18,023
comacopencord1.0.04 of 9See more

comac opencord 1.0.0

4 of the 9 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
setuptools@40.6.3.post20190116
70.0.0
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@39.0.1
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
omecproject/onos-progran:1.0.05715e5648aa0
python-setuptools@20.7.0-1
20.7.0-1ubuntu0.1~esm2
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@39.0.1
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

88,616
comac-platformopencord0.0.172 of 11See more

comac-platform opencord 0.0.17

2 of the 11 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
setuptools@40.6.3.post20190116
70.0.0
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@39.0.1
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

26,234
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
woojoong/wowza:latestec230db19652
python-setuptools@39.0.1-2
39.0.1-2ubuntu0.1+esm1

Open the chart page →

42,662
nem-monitoringopencord1.3.221 of 9See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.20af151f677a63
setuptools@41.0.1
70.0.0

Open the chart page →

4,612
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
omecproject/mme-exporter:paging-latestbcc5f19fd676
python-pip@9.0.1-2.3~ubuntu1.18.04.1
python-setuptools@39.0.1-2
setuptools@39.0.1
9.0.1-2.3~ubuntu1.18.04.8+esm4
39.0.1-2ubuntu0.1+esm1
70.0.0

Open the chart page →

40,795
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
python-setuptools@20.7.0-1
20.7.0-1ubuntu0.1~esm2

Open the chart page →

38,889
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@20.7.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

12,631
sebaopencord1.0.04 of 17See more

seba opencord 1.0.0

4 of the 17 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
voltha/voltha-cli:1.6.0c4e41e92f046
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@40.6.2
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
voltha/voltha-netconf:1.6.037f80524c207
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@20.7.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
voltha/voltha-ofagent:1.6.09ee8c1f4428c
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@20.7.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
voltha/voltha-voltha:1.6.0ff596b62de59
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@40.6.2
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

93,965
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
setuptools@65.5.0
70.0.0

Open the chart page →

11,003
open-pdcopen-pdc0.1.01 of 3See more

open-pdc open-pdc 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
70.0.0

Open the chart page →

3,423
open-pubopen-pub0.1.01 of 3See more

open-pub open-pub 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
70.0.0

Open the chart page →

3,423
akeyless-api-gatewayopenshift1.41.21 of 1See more

akeyless-api-gateway openshift 1.41.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
akeyless/base-rhel:0.0.14ba8900a0061
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

11,795
bpjstk-serviceopenshift1.0.03 of 6See more

bpjstk-service openshift 1.0.0

3 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
andrianrf/backoffice:latest047a7837651e
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
andrianrf/backoffice-be:latest6036614803d4
python-setuptools@53.0.0-12.el9
0:53.0.0-12.el9_2.1
andrianrf/iso-server:latest7da47f525c7d
python-setuptools@53.0.0-12.el9
0:53.0.0-12.el9_2.1

Open the chart page →

34,721
canvas-oamportalopenshift4.0.01 of 1See more

canvas-oamportal openshift 4.0.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
gurolakman/oam:4.0.0ed8fd2062548
setuptools@39.2.0
70.0.0

Open the chart page →

7,519
chatbot-ai-sampleopenshift0.1.62 of 4See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/ai-lab/llamacpp_python:latest70d138997acd
setuptools@65.5.1
70.0.0
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
python-setuptools@53.0.0-12.el9
python3.11-setuptools@65.5.1-2.el9
setuptools@65.5.1
0:53.0.0-12.el9_4.1
0:65.5.1-2.el9_4.1
70.0.0

Open the chart page →

18,991
exporteropenshift1.0.473 of 3See more

exporter openshift 1.0.47

3 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
public.ecr.aws/perfectscale-io/kube-state-metrics:4.1.14-redhat849e235e2d3e
setuptools@39.2.0
70.0.0
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
setuptools@53.0.0
70.0.0
public.ecr.aws/perfectscale-io/ubi9/ubi:9.5d7c3def9252b
setuptools@53.0.0
70.0.0

Open the chart page →

13,034
flomesh-consoleopenshift0.70.0-30-ubi82 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
quay.io/flomesh/pipy-repo-ubi8:0.70.0-469912fdf6c183
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

9,968
fsmopenshift0.1.8-ubi.61 of 6See more

fsm openshift 0.1.8-ubi.6

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/flomesh/pipy-ubi8:0.50.0-8824352dca6672
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

16,554
hamiopenshift2.10.0-r0-openshift.c4e22e881 of 2See more

hami openshift 2.10.0-r0-openshift.c4e22e88

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/dynamia-ai/hami-enterprise:v2.10.0-r0-openshift.c4e22e88745504757300
setuptools@39.2.0
70.0.0

Open the chart page →

4,749
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
setuptools@53.0.0
70.0.0

Open the chart page →

4,145
kite-agentopenshift1.0.01 of 1See more

kite-agent openshift 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/fengyuanxing/zte_endogenous_security/kite-agent:V2.0.0734808044936
setuptools@39.2.0
70.0.0

Open the chart page →

5,863
orion-ldopenshift1.0.32 of 2See more

orion-ld openshift 1.0.3

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/fiware/orion-ld:1.0.1ea838e5b4051
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
quay.io/opencloudio/ibm-mongodb:4.0.24d8c631a6dc43
setuptools@39.0.1
70.0.0

Open the chart page →

14,727
osm-edgeopenshift1.2.1-ubi81 of 7See more

osm-edge openshift 1.2.1-ubi8

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/flomesh/pipy-ubi8:0.70.0-4635d87a381432
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

19,449
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
python-setuptools@53.0.0-12.el9
setuptools@53.0.0
0:53.0.0-12.el9_2.1
70.0.0

Open the chart page →

8,634
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

13,608
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

11,740
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

13,570
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

13,553
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

13,457
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

13,101
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
python-setuptools@39.0.1-2
39.0.1-2ubuntu0.1+esm1

Open the chart page →

15,607
open-webconceptopen-webconcept0.1.01 of 3See more

open-webconcept open-webconcept 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
70.0.0

Open the chart page →

3,423
openwhiskopenwhisk1.0.02 of 10See more

openwhisk openwhisk 1.0.0

2 of the 10 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
openwhisk/kafkaprovider:2.1.063dc3d2a0904
setuptools@41.4.0
70.0.0
openwhisk/ow-utils:1.0.0c80dba0de3aa
python-pip@9.0.1-2.3~ubuntu1.18.04.4
python-setuptools@39.0.1-2
setuptools@44.1.1
9.0.1-2.3~ubuntu1.18.04.8+esm4
39.0.1-2ubuntu0.1+esm1
70.0.0

Open the chart page →

36,230

Container images carrying it

1,047 by charts deploying them

A fixed version is listed for 17 of the 17 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/ceph/ceph:v21.1.05ff3692d2f3f
setuptools@69.0.3
70.0.0
1
quay.io/cephcsi/cephcsi:v3.5.128a674af1df2
setuptools@39.2.0
70.0.0
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
setuptools@59.4.0
70.0.0
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-ply@3.9-9.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-7.el8
python-urllib3@1.24.2-5.el8
python3x-pip@19.3.1-6.module+el8.7.0+15823+8950cfa7
python3x-setuptools@41.6.0-5.module+el8.5.0+12205+a865257a
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:3.11-10.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-7.el8_8.1
0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
0:20.2.4-7.module+el8.6.0+13003+6bb2c488
0:50.3.2-6.module+el8.8.0+22158+89b6fb7b
70.0.0
1
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-6.el8_4.1
0:1.25.10-3.module+el8.4.0+9822+20bf1249
70.0.0
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-ply@3.9-9.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:3.11-10.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-6.el8_4.1
0:1.25.10-3.module+el8.4.0+9822+20bf1249
70.0.0
1
quay.io/everythingascode/apishift:v0.3.08fbbcd23b902
setuptools@53.0.0
70.0.0
1
quay.io/evl.ms/argocd-exporter:0.0.136ea8f34aa6b
setuptools@57.5.0
70.0.0
1
quay.io/fengyuanxing/zte_endogenous_security/kite-agent:V2.0.0734808044936
setuptools@39.2.0
70.0.0
1
quay.io/fiware/apollo:0.0.1055330b1b60c1
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-7.el8_6.1
70.0.0
1
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/fiware/contract-management:3.3.122bcfcf874451
setuptools@39.2.0
70.0.0
1
quay.io/fiware/credentials-config-service:3.4.3f2fbced76da8
setuptools@39.2.0
70.0.0
1
quay.io/fiware/endpoint-configuration-service:0.4.30dc38a87b844
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-7.el8_6.1
70.0.0
1
quay.io/fiware/orion-ld:1.10.0b7ee7569a9a8
setuptools@39.2.0
70.0.0
1
quay.io/fiware/orion-ld:1.0.1ea838e5b4051
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/fiware/tmforum-account:1.18.06b25aac03414
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-agreement:1.18.081e7025dc16d
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-customer-bill-management:1.18.0dee901f1f75d
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-customer-management:1.18.0d3519cebecd0
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-party-catalog:1.18.07d6969a7393a
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-party-role:1.18.052db89f17863
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-product-catalog:1.18.0e409338726da
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-product-inventory:1.18.03a5d6dd30f1d
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-product-ordering-management:1.18.042c81c291f6f
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-quote:1.18.0d9ca3a334352
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-resource-catalog:1.18.0b0d853627c59
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-resource-function-activation:1.18.062a5acb63fd1
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-resource-inventory:1.18.0553b4a47730b
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-resource-order-management:1.18.0dd1778ad6203
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-service-catalog:1.18.074b0fad9e155
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-service-inventory:1.18.04be54e8cb5c0
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-service-order-management:1.18.0d2091785d544
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-software-management:1.18.01b74a2f7ba67
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-usage-management:1.18.042f190c42926
setuptools@39.2.0
70.0.0
1
quay.io/fiware/trusted-issuers-registry:0.11.1a8a9ec461034
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-7.el8_6.1
70.0.0
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/flomesh/pipy-repo-ubi8:0.70.0-469912fdf6c183
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/flomesh/pipy-ubi8:0.50.0-8824352dca6672
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/flomesh/pipy-ubi8:0.70.0-4635d87a381432
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/freeipa/freeipa-server:fedora-39-4.11.1d422ee50c2c3
setuptools@67.7.2
70.0.0
1
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
setuptools@53.0.0
70.0.0
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
setuptools@51.3.3
70.0.0
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
python-setuptools@39.2.0-5.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
setuptools@65.5.1
70.0.0
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-6.el8_4.1
70.0.0
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.