StackRadar

CVE-2024-6345

High

Advisory

Published 15 Jul 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.019
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
986
of 17,787 indexed, latest versions
Container images
1,047
deployed by those charts
Fix available
17 of 17
affected packages

setuptools vulnerable to Command Injection via package URL

Carried by container images the latest versions of 986 of 17,787 indexed charts deploy, on 1,047 images.

Affected packageAffected versionsFixed inImages
setuptoolspypi0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+104 more70.0.0997
python-setuptoolsrpm0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+3 more0:0.9.8-7.el7_9.1, 0:39.2.0-6.el8_4.1, 0:39.2.0-7.el8_6.1, 0:39.2.0-7.el8_8.1+3 more117
setuptoolsdeb45.2.0-1, 45.2.0-1ubuntu0.1, 59.6.0-1.2, 59.6.0-1.2ubuntu0.22.04.1+2 more45.2.0-1ubuntu0.2, 59.6.0-1.2ubuntu0.22.04.2, 66.1.1-1+deb12u1, 68.1.2-2ubuntu1.1102
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+11 more1.5.4-1ubuntu4+esm5, 8.1.1-2ubuntu0.6+esm8, 9.0.1-2.3~ubuntu1.18.04.8+esm4, 20.0.2-5ubuntu1.10+esm260
python-setuptoolsdeb3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more3.3-1ubuntu2+esm2, 20.7.0-1ubuntu0.1~esm2, 39.0.1-2ubuntu0.1+esm1, 44.0.0-2ubuntu0.1+esm139
py3-setuptoolsapk65.6.0-r0, 67.7.2-r0, 68.2.2-r0, 69.5.1-r070.3.0-r021
python-chardetrpm3.0.4-7.el80:3.0.4-19.module+el8.4.0+9822+20bf124920
python-idnarpm2.5-5.el80:2.10-3.module+el8.4.0+9822+20bf124920
python-pysocksrpm1.6.8-3.el80:1.7.1-4.module+el8.4.0+9822+20bf124920
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_80:2.25.0-2.module+el8.4.0+9822+20bf124920
python-urllib3rpm1.24.2-5.el8, 1.24.2-5.el8_6.10:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be120
python3x-setuptoolsrpm41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+548604230:50.3.2-3.module+el8.4.0+22168+8a561f05.2, 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b9
python-plyrpm3.9-9.el80:3.11-10.module+el8.4.0+9822+20bf12497
python39rpm3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.10:3.9.2-2.module+el8.4.0+20027+45e0e702.2, 0:3.9.16-1.module+el8.8.0+20025+f2100191.26
python3x-piprpm19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf12490:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c4884
python3.11-setuptoolsrpm65.5.1-2.el90:65.5.1-2.el9_4.11
python-wheelrpm0.33.6-5.module+el8.4.0+8888+89bc7e791:0.35.1-3.module+el8.4.0+15042+dc5a279b.11
OSV records
ALPINE-CVE-2024-6345DEBIAN-CVE-2024-6345GHSA-cx63-2mw6-8hw5RHSA-2024:5000RHSA-2024:5040RHSA-2024:5078RHSA-2024:5084RHSA-2024:5137RHSA-2024:5279RHSA-2024:5530RHSA-2024:5534RHSA-2024:6220RHSA-2024:6488RHSA-2024:6662UBUNTU-CVE-2024-6345RLSA-2024:5530
Also known as
BIT-setuptools-2024-6345, PYSEC-2026-1918, RHSA-2024:6907, USN-7002-1

Charts affected

986 by stars
ChartLatestAffected imagesRadar Score
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

11,640
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

16,117
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
python-pip@1.5.4-1ubuntu4
python-setuptools@3.3-1ubuntu2
setuptools@36.5.0.post20170921
1.5.4-1ubuntu4+esm5
3.3-1ubuntu2+esm2
70.0.0
galaxy/galaxy-stable:v18.018e577a626dfd
python-pip@1.5.4-1ubuntu4
python-setuptools@3.3-1ubuntu2
setuptools@39.2.0
1.5.4-1ubuntu4+esm5
3.3-1ubuntu2+esm2
70.0.0

Open the chart page →

70,968
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
cloudve/janis-terminal:latestaf56e77ca587
python-pip@9.0.1-2.3~ubuntu1.18.04.1
python-setuptools@39.0.1-2
setuptools@39.0.1
9.0.1-2.3~ubuntu1.18.04.8+esm4
39.0.1-2ubuntu0.1+esm1
70.0.0

Open the chart page →

14,285
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
setuptools@66.1.1
70.0.0

Open the chart page →

5,994
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
setuptools@46.4.0.post20200518
70.0.0

Open the chart page →

13,170
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
setuptools@65.5.1
70.0.0

Open the chart page →

7,521
clamapicnieg2.0.51 of 2See more

clamapi cnieg 2.0.5

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/mailu/clamav:1.9.5001d30483e4a8
py3-setuptools@65.6.0-r0
setuptools@65.6.0
70.3.0-r0
70.0.0

Open the chart page →

4,672
pulsarcnieg1.0.82 of 2See more

pulsar cnieg 1.0.8

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
setuptools@40.8.0
70.0.0
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
setuptools@40.6.3.post20190116
70.0.0

Open the chart page →

16,860
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
setuptools@68.1.2
70.0.0

Open the chart page →

13,286
web3-prometheus-exportercoinpri-helm-chartsVerified publisher0.1.31 of 1See more

web3-prometheus-exporter coinpri-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
setuptools@65.5.1
70.0.0

Open the chart page →

3,236
sumoconsensys0.4.1451 of 4See more

sumo consensys 0.4.145

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.1.2.amd643bf359d5e340
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-7.el8_6.1
70.0.0

Open the chart page →

5,958
kfservingcowboysysopVerified publisher1.3.11 of 3See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kfserving/models-web-app:v0.6.1f322d6ffdfa3
setuptools@57.4.0
70.0.0

Open the chart page →

3,830
cp-helm-chartscp-helm-charts0.6.17 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

7 of the 8 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
python-setuptools@39.2.0-6.el8
setuptools@53.0.0
0:39.2.0-8.el8_10
70.0.0
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
python-setuptools@39.2.0-6.el8
setuptools@53.0.0
0:39.2.0-8.el8_10
70.0.0
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
python-setuptools@39.2.0-6.el8
setuptools@53.0.0
0:39.2.0-8.el8_10
70.0.0
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
python-setuptools@39.2.0-6.el8
setuptools@53.0.0
0:39.2.0-8.el8_10
70.0.0
confluentinc/cp-zookeeper:6.1.078c190f4472c
python-setuptools@39.2.0-6.el8
setuptools@53.0.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

58,856
couchpotatocronce0.0.11 of 1See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
setuptools@40.7.2
70.0.0

Open the chart page →

3,871
yadmscronce0.3.02 of 2See more

yadms cronce 0.3.0

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
mcronce/yadms-ftp:latestf820ef2e3c26
setuptools@41.6.0
70.0.0
mcronce/yadms-web:latestc03c1c7f5aa9
setuptools@41.6.0
70.0.0

Open the chart page →

2,500
wopiservercs3orgOfficialVerified publisher0.9.21 of 1See more

wopiserver cs3org 0.9.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
setuptools@67.4.0
70.0.0

Open the chart page →

2,348
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
opencsghq/csgship-agentic:v0.4.02cd29671a03e
setuptools@65.5.1
70.0.0

Open the chart page →

11,402
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
setuptools@66.1.1-1
66.1.1-1+deb12u1

Open the chart page →

14,206
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.4.121994f40e0da
setuptools@65.5.1
70.0.0

Open the chart page →

13,937
custom-rhcl-consolecustom-rhcl-consoleVerified publisher0.1.21 of 3See more

custom-rhcl-console custom-rhcl-console 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/custom-rhcl-console:v0.1.270bb0cabd653
setuptools@53.0.0
70.0.0

Open the chart page →

1,931
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
aristidetm/k8s-hub:3.3.7ccb516cb8474
setuptools@65.5.1
70.0.0

Open the chart page →

16,632
daejeon_2-3daejeon2-30.1.01 of 2See more

daejeon_2-3 daejeon2-3 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
clsen2024/daejeon_2-3:latest1156cd87c8fb
setuptools@58.1.0
70.0.0

Open the chart page →

1,140
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
setuptools@68.2.2
70.0.0

Open the chart page →

6,178
proxmox-exporterdamounVerified publisher1.10.01 of 1See more

proxmox-exporter damoun 1.10.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:3.4.2fcf041f0c24d
py3-setuptools@68.2.2-r0
setuptools@65.5.0
70.3.0-r0
70.0.0

Open the chart page →

1,140
nfs-provisionerdasmeta1.0.31 of 1See more

nfs-provisioner dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
setuptools@40.8.0
70.0.0

Open the chart page →

2,806
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
python-pip@9.0.1-2.3~ubuntu1
setuptools@40.6.3
9.0.1-2.3~ubuntu1.18.04.8+esm4
70.0.0

Open the chart page →

27,749
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
python-pip@9.0.1-2.3~ubuntu1.18.04.2
setuptools@50.3.0
9.0.1-2.3~ubuntu1.18.04.8+esm4
70.0.0

Open the chart page →

18,884
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
setuptools@68.1.2
70.0.0

Open the chart page →

6,177
datacube-owsdatacube-charts0.20.11 of 1See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
setuptools@68.1.2
70.0.0

Open the chart page →

6,028
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
python-pip@9.0.1-2.3~ubuntu1
setuptools@40.6.3
9.0.1-2.3~ubuntu1.18.04.8+esm4
70.0.0

Open the chart page →

22,425
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
python-pip@9.0.1-2.3~ubuntu1
setuptools@40.6.3
9.0.1-2.3~ubuntu1.18.04.8+esm4
70.0.0

Open the chart page →

24,356
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
setuptools@66.1.1-1
setuptools@66.1.1
66.1.1-1+deb12u1
70.0.0

Open the chart page →

10,116
kube-web-viewdecayofmind0.0.41 of 1See more

kube-web-view decayofmind 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
setuptools@50.3.0
70.0.0

Open the chart page →

2,264
intel-gpu-exporterdefault-ghVerified publisher0.1.01 of 1See more

intel-gpu-exporter default-gh 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
setuptools@59.6.0-1.2ubuntu0.22.04.1
setuptools@59.6.0
59.6.0-1.2ubuntu0.22.04.2
70.0.0

Open the chart page →

4,846
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
setuptools@46.1.3
70.0.0

Open the chart page →

4,422
prometheus-aws-costs-exporterdeliveryheroVerified publisher0.1.51 of 1See more

prometheus-aws-costs-exporter deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
setuptools@40.2.0
70.0.0

Open the chart page →

3,553
rds-downscalerdeliveryheroVerified publisher1.0.51 of 1See more

rds-downscaler deliveryhero 1.0.5

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/python:3.7.0-alpine3.8e12594db7297
setuptools@40.4.3
70.0.0

Open the chart page →

574
testdeploymentapp0.1.01 of 1See more

test deploymentapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
cbanuka/pythonapp:latestc742770d4247
setuptools@29.0.1.post20161130
70.0.0

Open the chart page →

409
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
python-pip@20.0.2-5ubuntu1.9
setuptools@45.2.0-1ubuntu0.1
setuptools@67.6.1
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

14,910
design-cataloguedesign-catalogue0.1.01 of 2See more

design-catalogue design-catalogue 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
setuptools@51.0.0
70.0.0

Open the chart page →

2,771
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
setuptools@59.6.0-1.2
59.6.0-1.2ubuntu0.22.04.2

Open the chart page →

30,150
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
setuptools@59.6.0-1.2
59.6.0-1.2ubuntu0.22.04.2

Open the chart page →

29,151
devops-diplomdevops-diplom-chartVerified publisher0.8.01 of 2See more

devops-diplom devops-diplom-chart 0.8.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
alexeyr7/sf-test-app:latestdf0b41fdbd53
setuptools@58.1.0
70.0.0

Open the chart page →

2,549
kube-openid-connectdevopstalesVerified publisher1.1.01 of 1See more

kube-openid-connect devopstales 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
devopstales/kube-openid-connector:1.042c40a0e9f1b
setuptools@57.5.0
70.0.0

Open the chart page →

1,333
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
setuptools@40.8.0
70.0.0

Open the chart page →

10,468
kube-prometheus-stackdevtron19.3.01 of 6See more

kube-prometheus-stack devtron 19.3.0

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.14.235654389f8a9
setuptools@57.5.0
70.0.0

Open the chart page →

8,645
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
setuptools@40.8.0
70.0.0

Open the chart page →

10,468
kube-prometheus-stackdevtron-labs19.3.01 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.14.235654389f8a9
setuptools@57.5.0
70.0.0

Open the chart page →

8,645
difydify1.0.02 of 4See more

dify dify 1.0.0

2 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:main-localda995c129e2f
setuptools@68.1.2
70.0.0
langgenius/dify-sandbox:0.2.009b7e8705673
setuptools@65.5.1
70.0.0

Open the chart page →

19,063

Container images carrying it

1,047 by charts deploying them

A fixed version is listed for 17 of the 17 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/ceph/ceph:v21.1.05ff3692d2f3f
setuptools@69.0.3
70.0.0
1
quay.io/cephcsi/cephcsi:v3.5.128a674af1df2
setuptools@39.2.0
70.0.0
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
setuptools@59.4.0
70.0.0
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-ply@3.9-9.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-7.el8
python-urllib3@1.24.2-5.el8
python3x-pip@19.3.1-6.module+el8.7.0+15823+8950cfa7
python3x-setuptools@41.6.0-5.module+el8.5.0+12205+a865257a
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:3.11-10.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-7.el8_8.1
0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
0:20.2.4-7.module+el8.6.0+13003+6bb2c488
0:50.3.2-6.module+el8.8.0+22158+89b6fb7b
70.0.0
1
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-6.el8_4.1
0:1.25.10-3.module+el8.4.0+9822+20bf1249
70.0.0
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-ply@3.9-9.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:3.11-10.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-6.el8_4.1
0:1.25.10-3.module+el8.4.0+9822+20bf1249
70.0.0
1
quay.io/everythingascode/apishift:v0.3.08fbbcd23b902
setuptools@53.0.0
70.0.0
1
quay.io/evl.ms/argocd-exporter:0.0.136ea8f34aa6b
setuptools@57.5.0
70.0.0
1
quay.io/fengyuanxing/zte_endogenous_security/kite-agent:V2.0.0734808044936
setuptools@39.2.0
70.0.0
1
quay.io/fiware/apollo:0.0.1055330b1b60c1
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-7.el8_6.1
70.0.0
1
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/fiware/contract-management:3.3.122bcfcf874451
setuptools@39.2.0
70.0.0
1
quay.io/fiware/credentials-config-service:3.4.3f2fbced76da8
setuptools@39.2.0
70.0.0
1
quay.io/fiware/endpoint-configuration-service:0.4.30dc38a87b844
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-7.el8_6.1
70.0.0
1
quay.io/fiware/orion-ld:1.10.0b7ee7569a9a8
setuptools@39.2.0
70.0.0
1
quay.io/fiware/orion-ld:1.0.1ea838e5b4051
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/fiware/tmforum-account:1.18.06b25aac03414
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-agreement:1.18.081e7025dc16d
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-customer-bill-management:1.18.0dee901f1f75d
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-customer-management:1.18.0d3519cebecd0
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-party-catalog:1.18.07d6969a7393a
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-party-role:1.18.052db89f17863
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-product-catalog:1.18.0e409338726da
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-product-inventory:1.18.03a5d6dd30f1d
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-product-ordering-management:1.18.042c81c291f6f
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-quote:1.18.0d9ca3a334352
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-resource-catalog:1.18.0b0d853627c59
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-resource-function-activation:1.18.062a5acb63fd1
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-resource-inventory:1.18.0553b4a47730b
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-resource-order-management:1.18.0dd1778ad6203
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-service-catalog:1.18.074b0fad9e155
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-service-inventory:1.18.04be54e8cb5c0
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-service-order-management:1.18.0d2091785d544
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-software-management:1.18.01b74a2f7ba67
setuptools@39.2.0
70.0.0
1
quay.io/fiware/tmforum-usage-management:1.18.042f190c42926
setuptools@39.2.0
70.0.0
1
quay.io/fiware/trusted-issuers-registry:0.11.1a8a9ec461034
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-7.el8_6.1
70.0.0
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/flomesh/pipy-repo-ubi8:0.70.0-469912fdf6c183
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/flomesh/pipy-ubi8:0.50.0-8824352dca6672
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/flomesh/pipy-ubi8:0.70.0-4635d87a381432
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/freeipa/freeipa-server:fedora-39-4.11.1d422ee50c2c3
setuptools@67.7.2
70.0.0
1
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
setuptools@53.0.0
70.0.0
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
setuptools@51.3.3
70.0.0
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
python-setuptools@39.2.0-5.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
setuptools@65.5.1
70.0.0
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-6.el8_4.1
70.0.0
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.