CVE-2024-6345

High

Advisory

Published 15 Jul 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.8; base score, highest
EPSS: 0.019; 79th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 974; of 17,787 indexed, latest versions
Container images: 1,036; deployed by those charts
Fix available: 17 of 17; affected packages

setuptools vulnerable to Command Injection via package URL

Carried by container images the latest versions of 974 of 17,787 indexed charts deploy, on 1,036 images.

Affected package	Affected versions	Fixed in	Images
setuptoolspypi	0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+103 more	70.0.0	986
python-setuptoolsrpm	0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+3 more	0:0.9.8-7.el7_9.1, 0:39.2.0-6.el8_4.1, 0:39.2.0-7.el8_6.1, 0:39.2.0-7.el8_8.1+3 more	115
setuptoolsdeb	45.2.0-1, 45.2.0-1ubuntu0.1, 59.6.0-1.2, 59.6.0-1.2ubuntu0.22.04.1+2 more	45.2.0-1ubuntu0.2, 59.6.0-1.2ubuntu0.22.04.2, 66.1.1-1+deb12u1, 68.1.2-2ubuntu1.1	101
python-pipdeb	1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+11 more	1.5.4-1ubuntu4+esm5, 8.1.1-2ubuntu0.6+esm8, 9.0.1-2.3~ubuntu1.18.04.8+esm4, 20.0.2-5ubuntu1.10+esm2	60
python-setuptoolsdeb	3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more	3.3-1ubuntu2+esm2, 20.7.0-1ubuntu0.1~esm2, 39.0.1-2ubuntu0.1+esm1, 44.0.0-2ubuntu0.1+esm1	39
py3-setuptoolsapk	65.6.0-r0, 67.7.2-r0, 68.2.2-r0, 69.5.1-r0	70.3.0-r0	21
python-chardetrpm	3.0.4-7.el8	0:3.0.4-19.module+el8.4.0+9822+20bf1249	20
python-idnarpm	2.5-5.el8	0:2.10-3.module+el8.4.0+9822+20bf1249	20
python-pysocksrpm	1.6.8-3.el8	0:1.7.1-4.module+el8.4.0+9822+20bf1249	20
python-requestsrpm	2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8	0:2.25.0-2.module+el8.4.0+9822+20bf1249	20
python-urllib3rpm	1.24.2-5.el8, 1.24.2-5.el8_6.1	0:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1	20
python3x-setuptoolsrpm	41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+54860423	0:50.3.2-3.module+el8.4.0+22168+8a561f05.2, 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b	9
python-plyrpm	3.9-9.el8	0:3.11-10.module+el8.4.0+9822+20bf1249	7
python39rpm	3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.1	0:3.9.2-2.module+el8.4.0+20027+45e0e702.2, 0:3.9.16-1.module+el8.8.0+20025+f2100191.2	6
python3x-piprpm	19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf1249	0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c488	4
python3.11-setuptoolsrpm	65.5.1-2.el9	0:65.5.1-2.el9_4.1	1
python-wheelrpm	0.33.6-5.module+el8.4.0+8888+89bc7e79	1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1	1

OSV records: ALPINE-CVE-2024-6345 DEBIAN-CVE-2024-6345 GHSA-cx63-2mw6-8hw5 RHSA-2024:5000 RHSA-2024:5040 RHSA-2024:5078 RHSA-2024:5084 RHSA-2024:5137 RHSA-2024:5279 RHSA-2024:5530 RHSA-2024:5534 RHSA-2024:6220 RHSA-2024:6488 RHSA-2024:6662 UBUNTU-CVE-2024-6345 RLSA-2024:5530
Also known as: BIT-setuptools-2024-6345, PYSEC-2026-1918, RHSA-2024:6907, USN-7002-1

Charts affected

974 by stars

Chart

Latest

Affected images

Radar Score

istio-helloworldrgnu

1.0.1

2 of 2 See more

istio-helloworld rgnu 1.0.1

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
istio/examples-helloworld-v1 :latest	328b237e4fb1	setuptools@69.0.3	70.0.0
istio/examples-helloworld-v2 :latest	0a7f02b2c7c9	setuptools@69.0.3	70.0.0

Open the chart page →

9,418

rhbk-neurofacerhbk-neuroface

1.0.0

2 of 4 See more

rhbk-neuroface rhbk-neuroface 1.0.0

2 of the 4 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/neuroface-backend :latest	cba71dc08c8a	setuptools@65.5.1	70.0.0
quay.io/maximilianopizarro/neuroface-frontend :latest	dcf24040cc77	setuptools@53.0.0	70.0.0

Open the chart page →

3,781

gristrlex

0.1.0

1 of 1 See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
gristlabs/grist :0.7.9	6e71b1914a7e	setuptools@40.8.0	70.0.0

Open the chart page →

5,215

kube-web-viewrlex

0.5.0

1 of 1 See more

kube-web-view rlex 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
hjacobs/kube-web-view :23.8.0	431f1bf013d0	setuptools@65.5.1	70.0.0

Open the chart page →

4,908

kresusrm3l

0.2.1

1 of 3 See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
bnjbvr/kresus :0.22.1	37e216b182c8	setuptools@66.1.1-1 setuptools@66.1.1	66.1.1-1+deb12u1 70.0.0

Open the chart page →

15,591

krr-enforcerrobusta

0.3.5

1 of 2 See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
alpine/k8s :1.30.0	bd01dae02676	py3-setuptools@68.2.2-r0 setuptools@69.5.1	70.3.0-r0 70.0.0

Open the chart page →

4,038

reviewboardrock8s

0.0.1

1 of 3 See more

reviewboard rock8s 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
beanbag/reviewboard :latest	6b840f546e1c	setuptools@59.6.0	70.0.0

Open the chart page →

6,084

argocdromholdings

1.8.1

1 of 3 See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	setuptools@40.8.0	70.0.0

Open the chart page →

10,466

kube-prometheus-stackromholdings

19.3.0

1 of 6 See more

kube-prometheus-stack romholdings 19.3.0

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/kiwigrid/k8s-sidecar :1.14.2	35654389f8a9	setuptools@57.5.0	70.0.0

Open the chart page →

8,645

imgtagrotational

0.2.0

1 of 1 See more

imgtag rotational 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
gcr.io/rotationalio-habanero/imgtag :89ec287	a534a3170d03	setuptools@65.5.1	70.0.0

Open the chart page →

3,312

agentdatarss3

0.1.0

1 of 1 See more

agentdata rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/rss3-network/agentdata :0.1.0	fd8d3e6e4cdf	setuptools@65.5.1	70.0.0

Open the chart page →

3,512

noderss3

0.7.2

1 of 3 See more

node rss3 0.7.2

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/rss3-network/agentdata :0.1.0	fd8d3e6e4cdf	setuptools@65.5.1	70.0.0

Open the chart page →

4,718

test-helm-app1saam-helm-test

0.1.0

1 of 1 See more

test-helm-app1 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
hamidyousefi93/saam-test :latest	c34f071f6ed0	setuptools@68.2.2	70.0.0

Open the chart page →

3,887

test-helm-app2saam-helm-test

0.1.0

1 of 1 See more

test-helm-app2 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
asdkant/fastapi-hello-world :latest	a23d8bf7c885	setuptools@51.0.0	70.0.0

Open the chart page →

2,770

evsantisbon

0.2.0

2 of 5 See more

ev santisbon 0.2.0

2 of the 5 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
santisbon/evwatcher :latest	c4e994ca4540	setuptools@66.1.1-1 setuptools@66.1.1	66.1.1-1+deb12u1 70.0.0
santisbon/evworker :latest	e807283f8d69	setuptools@66.1.1-1 setuptools@66.1.1	66.1.1-1+deb12u1 70.0.0

Open the chart page →

14,179

speedtestsantisbon

0.1.0

1 of 3 See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
santisbon/speedtest :latest	8ee3a1697227	setuptools@66.1.1-1 setuptools@66.1.1	66.1.1-1+deb12u1 70.0.0

Open the chart page →

12,668

airflowsb-helm-charts

0.3.0

1 of 1 See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
apache/airflow :2.8.1	e5560ad0b86e	setuptools@66.1.1	70.0.0

Open the chart page →

10,209

nvme-exporterschichtel

0.1.6

1 of 1 See more

nvme-exporter schichtel 0.1.6

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/b-it-projects-gmbh/nvme_exporter :latest	e70307b193c6	setuptools@58.1.0	70.0.0

Open the chart page →

1,071

syncstorageschichtel

0.1.1

1 of 1 See more

syncstorage schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
mozilla/syncstorage-rs :0.15.8	93752877dced	setuptools@52.0.0	70.0.0

Open the chart page →

1,318

otterwikischmitzis

0.1.0

1 of 1 See more

otterwiki schmitzis 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
redimp/otterwiki :2	778bf30da3da	setuptools@66.1.1	70.0.0

Open the chart page →

3,218

wyoming-faster-whisperschoolguys-helmcharts

0.1.4

1 of 1 See more

wyoming-faster-whisper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
rhasspy/wyoming-whisper :3.5.0	308b7959a925	setuptools@66.1.1	70.0.0

Open the chart page →

2,291

wyoming-piperschoolguys-helmcharts

0.1.4

1 of 1 See more

wyoming-piper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
rhasspy/wyoming-piper :2.3.1	69b7f797ae3a	setuptools@66.1.1	70.0.0

Open the chart page →

1,864

sealed-secrets-uisealed-secrets-ui

0.0.8

1 of 1 See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/noahburrell0/sealed-secrets-ui :v0.1.4	7e7368fb472d	setuptools@65.5.1	70.0.0

Open the chart page →

4,707

seldon-core-analyticsseldon

1.17.1

1 of 8 See more

seldon-core-analytics seldon 1.17.1

1 of the 8 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
kiwigrid/k8s-sidecar :0.1.151	7b98eecdf6d1	setuptools@46.1.3	70.0.0

Open the chart page →

10,733

seldon-core-loadtestingseldon

0.2.0

1 of 1 See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
seldonio/locust-core :0.8	1d0da98a2d76	python-pip@8.1.1-2ubuntu0.4 python-setuptools@20.7.0-1 setuptools@20.7.0	8.1.1-2ubuntu0.6+esm8 20.7.0-1ubuntu0.1~esm2 70.0.0

Open the chart page →

23,007

seldon-deployseldon

1.4.0

1 of 2 See more

seldon-deploy seldon 1.4.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
seldonio/seldon-request-logger :1.11.2	4e985d2006a8	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 python3x-pip@19.3.1-1.module+el8.4.0+8888+89bc7e79 python3x-setuptools@41.6.0-4.module+el8.4.0+8888+89bc7e79 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-6.el8_4.1 0:1.25.10-3.module+el8.4.0+9822+20bf1249 0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1 0:50.3.2-3.module+el8.4.0+22168+8a561f05.2 70.0.0

Open the chart page →

21,997

sentry-dbsentry

0.9.4

1 of 10 See more

sentry-db sentry 0.9.4

1 of the 10 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
confluentinc/cp-kafka :5.4.0	1bbda887bc53	setuptools@44.0.0	70.0.0

Open the chart page →

10,967

cachetsergiotocalini

1.0.0

1 of 1 See more

cachet sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
cachethq/docker :2.3.15	a61ff0f67ea7	setuptools@33.1.1.post20171031	70.0.0

Open the chart page →

1,896

classificationsignalen

4.24.0

1 of 1 See more

classification signalen 4.24.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
signalen/classification :ad60447d1733473e30ab0a3ba53d58141cc1d250	9496ae672877	setuptools@40.8.0	70.0.0

Open the chart page →

1,553

simple-keycloaksikalabs

0.1.0

1 of 1 See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.1	8830f76112b6	python-setuptools@39.2.0-6.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0

Open the chart page →

6,443

sonatype-nexus3simcube

1.0.1

1 of 2 See more

sonatype-nexus3 simcube 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
sonatype/nexus3 :3.58.1	586060431b64	python-setuptools@39.2.0-7.el8 setuptools@39.2.0	0:39.2.0-7.el8_8.1 70.0.0

Open the chart page →

4,946

digdagskyoo2003

0.5.2

1 of 4 See more

digdag skyoo2003 0.5.2

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/skyoo2003/digdag :0.0.1	821fd6a6f2cd	setuptools@51.3.3	70.0.0

Open the chart page →

6,949

docker-registryslamdev

0.0.4

1 of 2 See more

docker-registry slamdev 0.0.4

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
hcguersoy/cleanreg :v0.8.0	63b76fdcfbe1	setuptools@58.1.0	70.0.0

Open the chart page →

1,949

marge-botslamdev

0.0.1

1 of 1 See more

marge-bot slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.11.0	7235809b43b3	setuptools@65.5.0	70.0.0

Open the chart page →

1,426

weblateslamdev

0.0.11

1 of 2 See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
weblate/weblate :3.11.3-1	82848df56ecd	setuptools@40.8.0	70.0.0

Open the chart page →

8,694

frigatesmarthall

1.0.6

1 of 1 See more

frigate smarthall 1.0.6

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/blakeblackshear/frigate :0.12.0	c862771e38e8	setuptools@52.0.0	70.0.0

Open the chart page →

2,243

mealiesmarthall

0.0.10

1 of 1 See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/mealie-recipes/mealie :v1.4.0	b56da41cf178	setuptools@67.1.0	70.0.0

Open the chart page →

5,565

aafsmo-helm-chart

6.0.0

1 of 14 See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	python-pip@8.1.1-2ubuntu0.4 python-setuptools@20.7.0-1 setuptools@40.8.0	8.1.1-2ubuntu0.6+esm8 20.7.0-1ubuntu0.1~esm2 70.0.0

Open the chart page →

25,769

aaismo-helm-chart

6.0.0

1 of 14 See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	python-pip@8.1.1-2ubuntu0.4 python-setuptools@20.7.0-1 setuptools@40.8.0	8.1.1-2ubuntu0.6+esm8 20.7.0-1ubuntu0.1~esm2 70.0.0

Open the chart page →

25,803

dgbuildersmo-helm-chart

6.0.0

1 of 3 See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	python-pip@8.1.1-2ubuntu0.4 python-setuptools@20.7.0-1 setuptools@39.0.1	8.1.1-2ubuntu0.6+esm8 20.7.0-1ubuntu0.1~esm2 70.0.0

Open the chart page →

28,470

dmaap-listenersmo-helm-chart

6.0.0

1 of 3 See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	python-pip@8.1.1-2ubuntu0.4 python-setuptools@20.7.0-1 setuptools@40.8.0	8.1.1-2ubuntu0.6+esm8 20.7.0-1ubuntu0.1~esm2 70.0.0

Open the chart page →

25,769

elasticsearchsmo-helm-chart

6.0.0

1 of 5 See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	python-pip@8.1.1-2ubuntu0.4 python-setuptools@20.7.0-1 setuptools@40.8.0	8.1.1-2ubuntu0.6+esm8 20.7.0-1ubuntu0.1~esm2 70.0.0

Open the chart page →

24,776

logsmo-helm-chart

6.0.0

1 of 6 See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	python-pip@8.1.1-2ubuntu0.4 python-setuptools@20.7.0-1 setuptools@39.0.1	8.1.1-2ubuntu0.6+esm8 20.7.0-1ubuntu0.1~esm2 70.0.0

Open the chart page →

29,220

mariadb-initsmo-helm-chart

6.0.0

1 of 2 See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	python-pip@8.1.1-2ubuntu0.4 python-setuptools@20.7.0-1 setuptools@40.8.0	8.1.1-2ubuntu0.6+esm8 20.7.0-1ubuntu0.1~esm2 70.0.0

Open the chart page →

24,776

msbsmo-helm-chart

6.0.0

1 of 6 See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	python-pip@8.1.1-2ubuntu0.4 python-setuptools@20.7.0-1 setuptools@39.0.1	8.1.1-2ubuntu0.6+esm8 20.7.0-1ubuntu0.1~esm2 70.0.0

Open the chart page →

27,477

pndasmo-helm-chart

6.0.0

1 of 3 See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	python-pip@8.1.1-2ubuntu0.4 python-setuptools@20.7.0-1 setuptools@39.0.1	8.1.1-2ubuntu0.6+esm8 20.7.0-1ubuntu0.1~esm2 70.0.0

Open the chart page →

27,477

pombasmo-helm-chart

6.0.0

1 of 17 See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	python-pip@8.1.1-2ubuntu0.4 python-setuptools@20.7.0-1 setuptools@39.0.1	8.1.1-2ubuntu0.6+esm8 20.7.0-1ubuntu0.1~esm2 70.0.0

Open the chart page →

29,220

portalsmo-helm-chart

6.0.0

1 of 8 See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	python-pip@8.1.1-2ubuntu0.4 python-setuptools@20.7.0-1 setuptools@39.0.1	8.1.1-2ubuntu0.6+esm8 20.7.0-1ubuntu0.1~esm2 70.0.0

Open the chart page →

27,477

sdcsmo-helm-chart

6.0.0

1 of 14 See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	python-pip@8.1.1-2ubuntu0.4 python-setuptools@20.7.0-1 setuptools@40.8.0	8.1.1-2ubuntu0.6+esm8 20.7.0-1ubuntu0.1~esm2 70.0.0

Open the chart page →

25,769

sdnc-ansible-serversmo-helm-chart

6.0.0

1 of 3 See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	python-pip@8.1.1-2ubuntu0.4 python-setuptools@20.7.0-1 setuptools@40.8.0	8.1.1-2ubuntu0.6+esm8 20.7.0-1ubuntu0.1~esm2 70.0.0

Open the chart page →

25,769

Container images carrying it

1,036 by charts deploying them

A fixed version is listed for 17 of the 17 affected packages.

Container image	Digest	Package	Fixed in	Used by
ahmetgrbzz/web_server :2.0	f018bafd2b0c	setuptools@69.2.0	70.0.0	1
aibrix/metadata-service :v0.7.0	63fb81a64377	setuptools@65.5.1	70.0.0	1
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	setuptools@45.2.0-1	45.2.0-1ubuntu0.2	1
ajanvier/polr :2.3.0	91ac61b88c85	setuptools@51.3.3	70.0.0	1
akeyless/base-rhel :0.0.1	4ba8900a0061	python-setuptools@39.2.0-7.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0	1
alaaamin/reload-count-tornado-py-app :v1.0.1alpine	46da5844794e	setuptools@58.1.0	70.0.0	1
alerta/alerta-web :8.5.0	4786b9eaa606	setuptools@58.5.3	70.0.0	1
alexeyr7/sf-test-app :latest	df0b41fdbd53	setuptools@58.1.0	70.0.0	1
alexvm6/generator :latest	fb99ee4f760a	setuptools@65.5.1	70.0.0	1
alexvm6/pythonalex :latest	89a05786879c	setuptools@65.5.1	70.0.0	1
alfresco/alfresco-activemq :5.18.7-jre17-rockylinux8	5472f88d9b0b	setuptools@39.2.0	70.0.0	1
allegroai/clearml :2.0.0-613	713ae38f7daf	setuptools@66.1.1-1 setuptools@66.1.1	66.1.1-1+deb12u1 70.0.0	1
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	python-pip@9.0.1-2.3~ubuntu1.18.04.5 python-setuptools@39.0.1-2 setuptools@39.0.1	9.0.1-2.3~ubuntu1.18.04.8+esm4 39.0.1-2ubuntu0.1+esm1 70.0.0	1
allegroai/clearml-serving-inference :1.3.0	fca885e8cfc6	setuptools@65.5.1	70.0.0	1
allegroai/clearml-serving-statistics :1.3.0	c58d9da7bdf8	setuptools@65.5.1	70.0.0	1
alpine/k8s :1.22.6	00ac10bcb759	setuptools@57.4.0	70.0.0	1
alpine/k8s :1.27.3	21b24e6bf801	setuptools@65.5.0	70.0.0	1
alpine/k8s :1.18.16	a41efe02a041	setuptools@56.0.0	70.0.0	1
alpine/k8s :1.30.0	bd01dae02676	py3-setuptools@68.2.2-r0 setuptools@69.5.1	70.3.0-r0 70.0.0	1
alpine/k8s :1.30.2	cd560fce90f7	py3-setuptools@69.5.1-r0	70.3.0-r0	1
alpine/k8s :1.28.2	fc059f056ad0	setuptools@65.5.0	70.0.0	1
amagdi888/my-repo :hello-app	d8a10fc8faf6	setuptools@58.1.0	70.0.0	1
amancevice/superset :0.28.1	c8c04bfe3d66	setuptools@40.8.0	70.0.0	1
amazon/opendistro-for-elasticsearch :1.4.0	6df71eb04639	setuptools@0.9.8	70.0.0	1
amd64/mysql :5.7	e20a653e0f51	setuptools@58.1.0	70.0.0	1
amundsendev/amundsen-frontend :2.1.1	69e7915e61c1	setuptools@46.1.3	70.0.0	1
amundsendev/amundsen-metadata :2.5.4	4d98eb21f5f9	setuptools@49.6.0	70.0.0	1
amundsendev/amundsen-search :2.4.0	99dda9502c3e	setuptools@49.6.0	70.0.0	1
anchore/anchore-engine :v0.10.0	bde9eedf639d	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 python-wheel@0.33.6-5.module+el8.4.0+8888+89bc7e79 python3x-pip@19.3.1-1.module+el8.4.0+8888+89bc7e79 python3x-setuptools@41.6.0-4.module+el8.4.0+8888+89bc7e79 setuptools@41.6.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-6.el8_4.1 0:1.25.10-3.module+el8.4.0+9822+20bf1249 1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1 0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1 0:50.3.2-3.module+el8.4.0+22168+8a561f05.2 70.0.0	1
anchore/anchore-engine :v0.7.1	ed9b3badd17c	python-setuptools@39.2.0-5.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0	1
andrewgolikov55/intel-gpu-exporter :latest	fcc001b61c0e	setuptools@59.6.0-1.2ubuntu0.22.04.1 setuptools@59.6.0	59.6.0-1.2ubuntu0.22.04.2 70.0.0	1
andrianrf/backoffice :latest	047a7837651e	python-setuptools@39.2.0-7.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0	1
andrianrf/backoffice-be :latest	6036614803d4	python-setuptools@53.0.0-12.el9	0:53.0.0-12.el9_2.1	1
andrianrf/iso-server :latest	7da47f525c7d	python-setuptools@53.0.0-12.el9	0:53.0.0-12.el9_2.1	1
apache/airflow :2.8.4-python3.9	64e58748b6b9	setuptools@58.1.0	70.0.0	1
apache/airflow :2.10.2-python3.9	ce90bdc3d2af	setuptools@58.1.0	70.0.0	1
apache/airflow :2.8.1	e5560ad0b86e	setuptools@66.1.1	70.0.0	1
apache/bookkeeper :4.14.5	a7d9970c148f	setuptools@39.2.0	70.0.0	1
apache/hadoop :3	af361b20bec0	setuptools@0.9.8	70.0.0	1
apachepulsar/pulsar :3.1.0	16f9fdab3fa6	setuptools@59.6.0-1.2ubuntu0.22.04.1 setuptools@59.6.0	59.6.0-1.2ubuntu0.22.04.2 70.0.0	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	python-pip@20.0.2-5ubuntu1.6 setuptools@45.2.0-1 setuptools@45.2.0	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0	1
apachepulsar/pulsar :2.6.1	4db6ff0b4045	setuptools@40.8.0	70.0.0	1
apachepulsar/pulsar :3.0.7	9c9947de139d	setuptools@59.6.0	70.0.0	1
apachepulsar/pulsar :2.9.0	d056c89b7131	setuptools@45.2.0-1 setuptools@45.2.0	45.2.0-1ubuntu0.2 70.0.0	1
apachepulsar/pulsar :2.8.2	d538416d5afe	setuptools@45.2.0-1 setuptools@45.2.0	45.2.0-1ubuntu0.2 70.0.0	1
apache/ranger :2.7.0	76c176e8a0e4	setuptools@59.6.0	70.0.0	1
apache/superset :9cdaa280429ec297db16d56c94fd77b5d2aff107	975ab033580d	setuptools@57.5.0	70.0.0	1
apache/superset :4.0.1	ab9467fd712c	setuptools@58.1.0	70.0.0	1
apecloud/aperag :v0.0.0-nightly	8ac9947a2c84	setuptools@65.5.1	70.0.0	1
apecloud/kb-cloud-installer :v2.1.42-certified	98abc64aa985	setuptools@53.0.0	70.0.0	1