StackRadar

CVE-2024-6345

High

Advisory

Published 15 Jul 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.019
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
986
of 17,787 indexed, latest versions
Container images
1,047
deployed by those charts
Fix available
17 of 17
affected packages

setuptools vulnerable to Command Injection via package URL

Carried by container images the latest versions of 986 of 17,787 indexed charts deploy, on 1,047 images.

Affected packageAffected versionsFixed inImages
setuptoolspypi0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+104 more70.0.0997
python-setuptoolsrpm0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+3 more0:0.9.8-7.el7_9.1, 0:39.2.0-6.el8_4.1, 0:39.2.0-7.el8_6.1, 0:39.2.0-7.el8_8.1+3 more117
setuptoolsdeb45.2.0-1, 45.2.0-1ubuntu0.1, 59.6.0-1.2, 59.6.0-1.2ubuntu0.22.04.1+2 more45.2.0-1ubuntu0.2, 59.6.0-1.2ubuntu0.22.04.2, 66.1.1-1+deb12u1, 68.1.2-2ubuntu1.1102
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+11 more1.5.4-1ubuntu4+esm5, 8.1.1-2ubuntu0.6+esm8, 9.0.1-2.3~ubuntu1.18.04.8+esm4, 20.0.2-5ubuntu1.10+esm260
python-setuptoolsdeb3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more3.3-1ubuntu2+esm2, 20.7.0-1ubuntu0.1~esm2, 39.0.1-2ubuntu0.1+esm1, 44.0.0-2ubuntu0.1+esm139
py3-setuptoolsapk65.6.0-r0, 67.7.2-r0, 68.2.2-r0, 69.5.1-r070.3.0-r021
python-chardetrpm3.0.4-7.el80:3.0.4-19.module+el8.4.0+9822+20bf124920
python-idnarpm2.5-5.el80:2.10-3.module+el8.4.0+9822+20bf124920
python-pysocksrpm1.6.8-3.el80:1.7.1-4.module+el8.4.0+9822+20bf124920
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_80:2.25.0-2.module+el8.4.0+9822+20bf124920
python-urllib3rpm1.24.2-5.el8, 1.24.2-5.el8_6.10:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be120
python3x-setuptoolsrpm41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+548604230:50.3.2-3.module+el8.4.0+22168+8a561f05.2, 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b9
python-plyrpm3.9-9.el80:3.11-10.module+el8.4.0+9822+20bf12497
python39rpm3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.10:3.9.2-2.module+el8.4.0+20027+45e0e702.2, 0:3.9.16-1.module+el8.8.0+20025+f2100191.26
python3x-piprpm19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf12490:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c4884
python3.11-setuptoolsrpm65.5.1-2.el90:65.5.1-2.el9_4.11
python-wheelrpm0.33.6-5.module+el8.4.0+8888+89bc7e791:0.35.1-3.module+el8.4.0+15042+dc5a279b.11
OSV records
ALPINE-CVE-2024-6345DEBIAN-CVE-2024-6345GHSA-cx63-2mw6-8hw5RHSA-2024:5000RHSA-2024:5040RHSA-2024:5078RHSA-2024:5084RHSA-2024:5137RHSA-2024:5279RHSA-2024:5530RHSA-2024:5534RHSA-2024:6220RHSA-2024:6488RHSA-2024:6662UBUNTU-CVE-2024-6345RLSA-2024:5530
Also known as
BIT-setuptools-2024-6345, PYSEC-2026-1918, RHSA-2024:6907, USN-7002-1

Charts affected

986 by stars
ChartLatestAffected imagesRadar Score
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

11,640
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

16,117
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
python-pip@1.5.4-1ubuntu4
python-setuptools@3.3-1ubuntu2
setuptools@36.5.0.post20170921
1.5.4-1ubuntu4+esm5
3.3-1ubuntu2+esm2
70.0.0
galaxy/galaxy-stable:v18.018e577a626dfd
python-pip@1.5.4-1ubuntu4
python-setuptools@3.3-1ubuntu2
setuptools@39.2.0
1.5.4-1ubuntu4+esm5
3.3-1ubuntu2+esm2
70.0.0

Open the chart page →

70,968
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
cloudve/janis-terminal:latestaf56e77ca587
python-pip@9.0.1-2.3~ubuntu1.18.04.1
python-setuptools@39.0.1-2
setuptools@39.0.1
9.0.1-2.3~ubuntu1.18.04.8+esm4
39.0.1-2ubuntu0.1+esm1
70.0.0

Open the chart page →

14,285
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
setuptools@66.1.1
70.0.0

Open the chart page →

5,994
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
setuptools@46.4.0.post20200518
70.0.0

Open the chart page →

13,170
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
setuptools@65.5.1
70.0.0

Open the chart page →

7,521
clamapicnieg2.0.51 of 2See more

clamapi cnieg 2.0.5

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/mailu/clamav:1.9.5001d30483e4a8
py3-setuptools@65.6.0-r0
setuptools@65.6.0
70.3.0-r0
70.0.0

Open the chart page →

4,672
pulsarcnieg1.0.82 of 2See more

pulsar cnieg 1.0.8

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
setuptools@40.8.0
70.0.0
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
setuptools@40.6.3.post20190116
70.0.0

Open the chart page →

16,860
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
setuptools@68.1.2
70.0.0

Open the chart page →

13,286
web3-prometheus-exportercoinpri-helm-chartsVerified publisher0.1.31 of 1See more

web3-prometheus-exporter coinpri-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
setuptools@65.5.1
70.0.0

Open the chart page →

3,236
sumoconsensys0.4.1451 of 4See more

sumo consensys 0.4.145

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.1.2.amd643bf359d5e340
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-7.el8_6.1
70.0.0

Open the chart page →

5,958
kfservingcowboysysopVerified publisher1.3.11 of 3See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kfserving/models-web-app:v0.6.1f322d6ffdfa3
setuptools@57.4.0
70.0.0

Open the chart page →

3,830
cp-helm-chartscp-helm-charts0.6.17 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

7 of the 8 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
python-setuptools@39.2.0-6.el8
setuptools@53.0.0
0:39.2.0-8.el8_10
70.0.0
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
python-setuptools@39.2.0-6.el8
setuptools@53.0.0
0:39.2.0-8.el8_10
70.0.0
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
python-setuptools@39.2.0-6.el8
setuptools@53.0.0
0:39.2.0-8.el8_10
70.0.0
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
python-setuptools@39.2.0-6.el8
setuptools@53.0.0
0:39.2.0-8.el8_10
70.0.0
confluentinc/cp-zookeeper:6.1.078c190f4472c
python-setuptools@39.2.0-6.el8
setuptools@53.0.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

58,856
couchpotatocronce0.0.11 of 1See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
setuptools@40.7.2
70.0.0

Open the chart page →

3,871
yadmscronce0.3.02 of 2See more

yadms cronce 0.3.0

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
mcronce/yadms-ftp:latestf820ef2e3c26
setuptools@41.6.0
70.0.0
mcronce/yadms-web:latestc03c1c7f5aa9
setuptools@41.6.0
70.0.0

Open the chart page →

2,500
wopiservercs3orgOfficialVerified publisher0.9.21 of 1See more

wopiserver cs3org 0.9.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
setuptools@67.4.0
70.0.0

Open the chart page →

2,348
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
opencsghq/csgship-agentic:v0.4.02cd29671a03e
setuptools@65.5.1
70.0.0

Open the chart page →

11,402
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
setuptools@66.1.1-1
66.1.1-1+deb12u1

Open the chart page →

14,206
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.4.121994f40e0da
setuptools@65.5.1
70.0.0

Open the chart page →

13,937
custom-rhcl-consolecustom-rhcl-consoleVerified publisher0.1.21 of 3See more

custom-rhcl-console custom-rhcl-console 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/custom-rhcl-console:v0.1.270bb0cabd653
setuptools@53.0.0
70.0.0

Open the chart page →

1,931
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
aristidetm/k8s-hub:3.3.7ccb516cb8474
setuptools@65.5.1
70.0.0

Open the chart page →

16,632
daejeon_2-3daejeon2-30.1.01 of 2See more

daejeon_2-3 daejeon2-3 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
clsen2024/daejeon_2-3:latest1156cd87c8fb
setuptools@58.1.0
70.0.0

Open the chart page →

1,140
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
setuptools@68.2.2
70.0.0

Open the chart page →

6,178
proxmox-exporterdamounVerified publisher1.10.01 of 1See more

proxmox-exporter damoun 1.10.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:3.4.2fcf041f0c24d
py3-setuptools@68.2.2-r0
setuptools@65.5.0
70.3.0-r0
70.0.0

Open the chart page →

1,140
nfs-provisionerdasmeta1.0.31 of 1See more

nfs-provisioner dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
setuptools@40.8.0
70.0.0

Open the chart page →

2,806
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
python-pip@9.0.1-2.3~ubuntu1
setuptools@40.6.3
9.0.1-2.3~ubuntu1.18.04.8+esm4
70.0.0

Open the chart page →

27,749
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
python-pip@9.0.1-2.3~ubuntu1.18.04.2
setuptools@50.3.0
9.0.1-2.3~ubuntu1.18.04.8+esm4
70.0.0

Open the chart page →

18,884
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
setuptools@68.1.2
70.0.0

Open the chart page →

6,177
datacube-owsdatacube-charts0.20.11 of 1See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
setuptools@68.1.2
70.0.0

Open the chart page →

6,028
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
python-pip@9.0.1-2.3~ubuntu1
setuptools@40.6.3
9.0.1-2.3~ubuntu1.18.04.8+esm4
70.0.0

Open the chart page →

22,425
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
python-pip@9.0.1-2.3~ubuntu1
setuptools@40.6.3
9.0.1-2.3~ubuntu1.18.04.8+esm4
70.0.0

Open the chart page →

24,356
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
setuptools@66.1.1-1
setuptools@66.1.1
66.1.1-1+deb12u1
70.0.0

Open the chart page →

10,116
kube-web-viewdecayofmind0.0.41 of 1See more

kube-web-view decayofmind 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
setuptools@50.3.0
70.0.0

Open the chart page →

2,264
intel-gpu-exporterdefault-ghVerified publisher0.1.01 of 1See more

intel-gpu-exporter default-gh 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
setuptools@59.6.0-1.2ubuntu0.22.04.1
setuptools@59.6.0
59.6.0-1.2ubuntu0.22.04.2
70.0.0

Open the chart page →

4,846
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
setuptools@46.1.3
70.0.0

Open the chart page →

4,422
prometheus-aws-costs-exporterdeliveryheroVerified publisher0.1.51 of 1See more

prometheus-aws-costs-exporter deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
setuptools@40.2.0
70.0.0

Open the chart page →

3,553
rds-downscalerdeliveryheroVerified publisher1.0.51 of 1See more

rds-downscaler deliveryhero 1.0.5

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/python:3.7.0-alpine3.8e12594db7297
setuptools@40.4.3
70.0.0

Open the chart page →

574
testdeploymentapp0.1.01 of 1See more

test deploymentapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
cbanuka/pythonapp:latestc742770d4247
setuptools@29.0.1.post20161130
70.0.0

Open the chart page →

409
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
python-pip@20.0.2-5ubuntu1.9
setuptools@45.2.0-1ubuntu0.1
setuptools@67.6.1
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

14,910
design-cataloguedesign-catalogue0.1.01 of 2See more

design-catalogue design-catalogue 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
setuptools@51.0.0
70.0.0

Open the chart page →

2,771
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
setuptools@59.6.0-1.2
59.6.0-1.2ubuntu0.22.04.2

Open the chart page →

30,150
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
setuptools@59.6.0-1.2
59.6.0-1.2ubuntu0.22.04.2

Open the chart page →

29,151
devops-diplomdevops-diplom-chartVerified publisher0.8.01 of 2See more

devops-diplom devops-diplom-chart 0.8.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
alexeyr7/sf-test-app:latestdf0b41fdbd53
setuptools@58.1.0
70.0.0

Open the chart page →

2,549
kube-openid-connectdevopstalesVerified publisher1.1.01 of 1See more

kube-openid-connect devopstales 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
devopstales/kube-openid-connector:1.042c40a0e9f1b
setuptools@57.5.0
70.0.0

Open the chart page →

1,333
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
setuptools@40.8.0
70.0.0

Open the chart page →

10,468
kube-prometheus-stackdevtron19.3.01 of 6See more

kube-prometheus-stack devtron 19.3.0

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.14.235654389f8a9
setuptools@57.5.0
70.0.0

Open the chart page →

8,645
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
setuptools@40.8.0
70.0.0

Open the chart page →

10,468
kube-prometheus-stackdevtron-labs19.3.01 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.14.235654389f8a9
setuptools@57.5.0
70.0.0

Open the chart page →

8,645
difydify1.0.02 of 4See more

dify dify 1.0.0

2 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:main-localda995c129e2f
setuptools@68.1.2
70.0.0
langgenius/dify-sandbox:0.2.009b7e8705673
setuptools@65.5.1
70.0.0

Open the chart page →

19,063

Container images carrying it

1,047 by charts deploying them

A fixed version is listed for 17 of the 17 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/kiali/kiali-operator:v2.32.096c5264d54ab
setuptools@53.0.0
70.0.0
1
quay.io/kiwigrid/k8s-sidecar:1.10.718feb3906286
setuptools@53.0.0
70.0.0
1
quay.io/kiwigrid/k8s-sidecar:1.15.61f025ae37b7b
setuptools@60.9.3
70.0.0
1
quay.io/kiwigrid/k8s-sidecar:1.21.0710e23b489c5
setuptools@65.5.1
70.0.0
1
quay.io/kiwigrid/k8s-sidecar:1.15.1a25886092fa4
setuptools@57.5.0
70.0.0
1
quay.io/kiwigrid/k8s-sidecar:1.25.2cb4c638ffb1f
setuptools@68.2.2
70.0.0
1
quay.io/maximilianopizarro/custom-rhcl-console:v0.1.270bb0cabd653
setuptools@53.0.0
70.0.0
1
quay.io/maximilianopizarro/neuralbank-frontend:latest5f4572ef6d6f
setuptools@53.0.0
70.0.0
1
quay.io/maximilianopizarro/neuroface-backend:v1.4.13194d46df0f9
setuptools@53.0.0
70.0.0
1
quay.io/maximilianopizarro/neuroface-backend:latestcba71dc08c8a
setuptools@65.5.1
70.0.0
1
quay.io/maximilianopizarro/neuroface-frontend:v1.4.1841b70cd1424
setuptools@53.0.0
70.0.0
1
quay.io/maximilianopizarro/neuroface-frontend:latestdcf24040cc77
setuptools@53.0.0
70.0.0
1
quay.io/maximilianopizarro/nfl-wallet-webapp:1.0.13fead5702be7
setuptools@39.2.0
70.0.0
1
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/maxiv/storageclass-router:0.4.160725dab588c
setuptools@69.0.3
70.0.0
1
quay.io/mongodb/farm-intro-backend:0.11a9ce0b8fbd4
setuptools@57.5.0
70.0.0
1
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
setuptools@58.1.0
70.0.0
1
quay.io/ongres/kubectl:v1.25.16-build-6.5304dada9e4503
setuptools@68.2.2
70.0.0
1
quay.io/openshift/origin-cli:4.66722d5041b47
python-setuptools@39.2.0-5.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
python-setuptools@39.2.0-5.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-ply@3.9-9.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-3.el8_6
python-setuptools@39.2.0-7.el8_6
python-urllib3@1.24.2-5.el8_6.1
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:3.11-10.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-7.el8_6.1
0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
70.0.0
1
quay.io/opsmxpublic/awsgit:v2-openssh0d21ba756f44
setuptools@52.0.0
70.0.0
1
quay.io/opsmxpublic/awsgit:v3-js15a6faada3d4
setuptools@52.0.0
70.0.0
1
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
setuptools@39.2.0
70.0.0
1
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
setuptools@39.2.0
70.0.0
1
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
setuptools@39.2.0
70.0.0
1
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-6.el8_4.1
0:1.25.10-3.module+el8.4.0+9822+20bf1249
70.0.0
1
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
setuptools@39.2.0
70.0.0
1
quay.io/opsmxpublic/ubi8-oes-ui:isd-spin-2025.10.01-e6f6f01-2025121006405d934bb66884
setuptools@39.2.0
70.0.0
1
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
python-setuptools@53.0.0-12.el9
python3.11-setuptools@65.5.1-2.el9
setuptools@65.5.1
0:53.0.0-12.el9_4.1
0:65.5.1-2.el9_4.1
70.0.0
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
python-setuptools@53.0.0-12.el9
setuptools@53.0.0
0:53.0.0-12.el9_2.1
70.0.0
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-ply@3.9-9.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
python39@3.9.2-1.module+el8.4.0+10237+bdc77aac
python3x-pip@20.2.4-3.module+el8.4.0+9822+20bf1249
python3x-setuptools@50.3.2-3.module+el8.4.0+9822+20bf1249
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:3.11-10.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-6.el8_4.1
0:1.25.10-3.module+el8.4.0+9822+20bf1249
0:3.9.2-2.module+el8.4.0+20027+45e0e702.2
0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1
0:50.3.2-3.module+el8.4.0+22168+8a561f05.2
70.0.0
1
quay.io/seamware/consent-facade:0.0.14be844c750c7e
setuptools@39.2.0
70.0.0
1
quay.io/soketi/pws:0.8-16-alpine399d2e6b10ef
setuptools@58.2.0
70.0.0
1
quay.io/stackgres/operator:1.19.1f241b0b20326
setuptools@68.2.2
70.0.0
1
quay.io/strimzi/operator:0.36.1e9e03b31007c
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-7.el8_8.1
70.0.0
1
quay.io/wi_stefan/dss-validation-service:0.0.18e928db29ee1
python-setuptools@39.2.0-6.el8_7.1
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
setuptools@57.5.0
70.0.0
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
setuptools@68.1.2
70.0.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-6.el8_4.1
0:1.25.10-3.module+el8.4.0+9822+20bf1249
70.0.0
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
python-pip@20.0.2-5ubuntu1.1
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0
1
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
setuptools@51.0.0
70.0.0
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
setuptools@57.5.0
70.0.0
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
setuptools@57.5.0
70.0.0
1
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
setuptools@69.0.2
70.0.0
1
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
setuptools@69.0.3
70.0.0
1
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
setuptools@53.0.0
70.0.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.