StackRadar

CVE-2024-6345

High

Advisory

Published 15 Jul 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.019
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
974
of 17,787 indexed, latest versions
Container images
1,036
deployed by those charts
Fix available
17 of 17
affected packages

setuptools vulnerable to Command Injection via package URL

Carried by container images the latest versions of 974 of 17,787 indexed charts deploy, on 1,036 images.

Affected packageAffected versionsFixed inImages
setuptoolspypi0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+103 more70.0.0986
python-setuptoolsrpm0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+3 more0:0.9.8-7.el7_9.1, 0:39.2.0-6.el8_4.1, 0:39.2.0-7.el8_6.1, 0:39.2.0-7.el8_8.1+3 more115
setuptoolsdeb45.2.0-1, 45.2.0-1ubuntu0.1, 59.6.0-1.2, 59.6.0-1.2ubuntu0.22.04.1+2 more45.2.0-1ubuntu0.2, 59.6.0-1.2ubuntu0.22.04.2, 66.1.1-1+deb12u1, 68.1.2-2ubuntu1.1101
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+11 more1.5.4-1ubuntu4+esm5, 8.1.1-2ubuntu0.6+esm8, 9.0.1-2.3~ubuntu1.18.04.8+esm4, 20.0.2-5ubuntu1.10+esm260
python-setuptoolsdeb3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more3.3-1ubuntu2+esm2, 20.7.0-1ubuntu0.1~esm2, 39.0.1-2ubuntu0.1+esm1, 44.0.0-2ubuntu0.1+esm139
py3-setuptoolsapk65.6.0-r0, 67.7.2-r0, 68.2.2-r0, 69.5.1-r070.3.0-r021
python-chardetrpm3.0.4-7.el80:3.0.4-19.module+el8.4.0+9822+20bf124920
python-idnarpm2.5-5.el80:2.10-3.module+el8.4.0+9822+20bf124920
python-pysocksrpm1.6.8-3.el80:1.7.1-4.module+el8.4.0+9822+20bf124920
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_80:2.25.0-2.module+el8.4.0+9822+20bf124920
python-urllib3rpm1.24.2-5.el8, 1.24.2-5.el8_6.10:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be120
python3x-setuptoolsrpm41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+548604230:50.3.2-3.module+el8.4.0+22168+8a561f05.2, 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b9
python-plyrpm3.9-9.el80:3.11-10.module+el8.4.0+9822+20bf12497
python39rpm3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.10:3.9.2-2.module+el8.4.0+20027+45e0e702.2, 0:3.9.16-1.module+el8.8.0+20025+f2100191.26
python3x-piprpm19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf12490:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c4884
python3.11-setuptoolsrpm65.5.1-2.el90:65.5.1-2.el9_4.11
python-wheelrpm0.33.6-5.module+el8.4.0+8888+89bc7e791:0.35.1-3.module+el8.4.0+15042+dc5a279b.11
OSV records
ALPINE-CVE-2024-6345DEBIAN-CVE-2024-6345GHSA-cx63-2mw6-8hw5RHSA-2024:5000RHSA-2024:5040RHSA-2024:5078RHSA-2024:5084RHSA-2024:5137RHSA-2024:5279RHSA-2024:5530RHSA-2024:5534RHSA-2024:6220RHSA-2024:6488RHSA-2024:6662UBUNTU-CVE-2024-6345RLSA-2024:5530
Also known as
BIT-setuptools-2024-6345, PYSEC-2026-1918, RHSA-2024:6907, USN-7002-1

Charts affected

974 by stars
ChartLatestAffected imagesRadar Score
npre-essentialsphntom0.1.601 of 22See more

npre-essentials phntom 0.1.60

1 of the 22 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.21.0710e23b489c5
setuptools@65.5.1
70.0.0

Open the chart page →

26,840
postgresql-backupphntom0.1.91 of 1See more

postgresql-backup phntom 0.1.9

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
phntom/postgresql-backup-s3:1.0.2249b6488f618b
py3-setuptools@65.6.0-r0
setuptools@65.6.0
70.3.0-r0
70.0.0

Open the chart page →

2,556
stocks-nasdaq-crawlerphntom0.0.361 of 1See more

stocks-nasdaq-crawler phntom 0.0.36

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
phntom/stocks-nasdaq-crawler:0.0.28d2b844700b57
setuptools@50.3.0
70.0.0

Open the chart page →

1,845
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
knspar/phronetis-operator:0.1.60c4f0543ee58
setuptools@69.5.1
70.0.0

Open the chart page →

16,196
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

22,084
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
py3-setuptools@69.5.1-r0
70.3.0-r0

Open the chart page →

25,934
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
python-setuptools@39.2.0-5.el8
setuptools@46.0.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

11,151
tenant-namespace-operatorpnnl-miscscripts0.1.281 of 1See more

tenant-namespace-operator pnnl-miscscripts 0.1.28

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-3.el8_8
python-setuptools@39.2.0-7.el8
python-urllib3@1.24.2-5.el8
python39@3.9.16-1.module+el8.8.0+18968+3d7b19f0.1
python3x-setuptools@50.3.2-4.module+el8.5.0+12204+54860423
setuptools@68.2.2
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-7.el8_8.1
0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
0:3.9.16-1.module+el8.8.0+20025+f2100191.2
0:50.3.2-6.module+el8.8.0+22158+89b6fb7b
70.0.0

Open the chart page →

12,754
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
setuptools@69.2.0
70.0.0

Open the chart page →

12,912
libretimepodzone-chartsVerified publisher0.4.14 of 9See more

libretime podzone-charts 0.4.1

4 of the 9 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/libretime/libretime-analyzer:latest3d5e236216ad
setuptools@65.5.1
70.0.0
ghcr.io/libretime/libretime-api:latesteae026cc8909
setuptools@65.5.1
70.0.0
ghcr.io/libretime/libretime-playout:latest71a8706531aa
setuptools@65.5.1
70.0.0
ghcr.io/libretime/libretime-worker:latestd39ff5272b2e
setuptools@65.5.1
70.0.0

Open the chart page →

11,149
postgres-controllerpostgres-controller1.3.61 of 1See more

postgres-controller postgres-controller 1.3.6

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
evgkrsk/postgres-controller:0.6.237f0e1f435c3
setuptools@67.1.0
70.0.0

Open the chart page →

1,782
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

27,558
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
70.0.0

Open the chart page →

28,484
prefect-agentprefectVerified publisher2024.8.301638221 of 1See more

prefect-agent prefect 2024.8.30163822

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
setuptools@65.5.1
70.0.0

Open the chart page →

5,451
wp-chartprojet-devops0.1.01 of 2See more

wp-chart projet-devops 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
70.0.0

Open the chart page →

5,203
prometheus-optimizerprometheus-optimizer0.2.221 of 1See more

prometheus-optimizer prometheus-optimizer 0.2.22

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
setuptools@57.5.0
70.0.0

Open the chart page →

4,416
flaskDiaryptj-miniproject2.1.21 of 2See more

flaskDiary ptj-miniproject 2.1.2

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
freedom98/flask:k3.0d7ce1533f297
setuptools@53.0.0
70.0.0

Open the chart page →

3,071
powerdnspuckpuck2.0.01 of 4See more

powerdns puckpuck 2.0.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
pschiffe/pdns-admin:0.4.137ebba8c2b8f
setuptools@65.5.1
70.0.0

Open the chart page →

4,616
seashellpuckpuck1.2.01 of 1See more

seashell puckpuck 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/puckpuck/seashell:1.2ef5e31333821
setuptools@65.5.0
70.0.0

Open the chart page →

4,215
pod-pvc-mappingpvc-exporter0.1.31 of 1See more

pod-pvc-mapping pvc-exporter 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
dockerid31415926/pod-pvc-mapping:v0.1.3354309669f16
setuptools@57.5.0
70.0.0

Open the chart page →

1,762
cdmswebapppyalive-cdmswebappVerified publisher0.1.01 of 3See more

cdmswebapp pyalive-cdmswebapp 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
70.0.0

Open the chart page →

6,668
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
setuptools@57.5.0
70.0.0

Open the chart page →

14,537
python-apppython-app-chart0.1.01 of 2See more

python-app python-app-chart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
mnaggar3396/python-app:latest371d8ed84b15
setuptools@58.1.0
70.0.0

Open the chart page →

3,382
python-fastapi-postgrespython-fastapi-postgres0.1.01 of 1See more

python-fastapi-postgres python-fastapi-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
archish27/python-fastapi-postgres:latest6610071a2101
setuptools@58.1.0
70.0.0

Open the chart page →

2,983
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
setuptools@69.5.1
70.0.0

Open the chart page →

12,566
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
setuptools@69.5.1
70.0.0

Open the chart page →

12,566
rabbitmq-producer-randomizerrabbitmq-producer-randomizer0.0.81 of 1See more

rabbitmq-producer-randomizer rabbitmq-producer-randomizer 0.0.8

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
genseb/rabbitmq-producer-randomizer:0.0.6cb7599641099
py3-setuptools@67.7.2-r0
setuptools@67.7.2
70.3.0-r0
70.0.0

Open the chart page →

879
rada-platformrada-platform0.1.03 of 7See more

rada-platform rada-platform 0.1.0

3 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
setuptools@58.1.0
70.0.0
trinodb/trino:45038c6f24ab1a4
python-setuptools@53.0.0-12.el9
0:53.0.0-12.el9_4.1
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
python-setuptools@53.0.0-12.el9
0:53.0.0-12.el9_4.1

Open the chart page →

21,211
kubecostradar-baseVerified publisher1.0.01 of 7See more

kubecost radar-base 1.0.0

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
setuptools@53.0.0
70.0.0

Open the chart page →

9,355
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

5,269
radar-kafkaradar-baseVerified publisher0.4.11 of 2See more

radar-kafka radar-base 0.4.1

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/lsst-sqre/strimzi-registry-operator:0.6.07e25f7048aff
setuptools@58.1.0
70.0.0

Open the chart page →

4,219
radar-s3-connectorradar-baseVerified publisher0.7.21 of 2See more

radar-s3-connector radar-base 0.7.2

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
linuxserver/yq:3.2.26f5b9586a93e
setuptools@65.5.0
70.0.0

Open the chart page →

1,416
rancher-auto-registerrancher-auto-registerVerified publisher0.1.01 of 1See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
setuptools@69.0.3
70.0.0

Open the chart page →

1,837
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
setuptools@45.2.0-1
45.2.0-1ubuntu0.2

Open the chart page →

15,520
helm-redchefredchef0.1.01 of 3See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
sharanalwar/redchef-backend:latest8d3cab80df49
setuptools@58.1.0
70.0.0

Open the chart page →

4,763
ibm-mongodb-enterprise-helmredhat0.3.01 of 1See more

ibm-mongodb-enterprise-helm redhat 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ibmcom/ibm-enterprise-mongodb-ppc64le:4.4d28bf361327a
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

12,248
ansible-automation-platformredhat-cop0.0.91 of 1See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-ply@3.9-9.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:3.11-10.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-6.el8_4.1
0:1.25.10-3.module+el8.4.0+9822+20bf1249
70.0.0

Open the chart page →

15,291
argocd-operatorredhat-cop1.2.21 of 1See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-ply@3.9-9.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:3.11-10.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-6.el8_4.1
0:1.25.10-3.module+el8.4.0+9822+20bf1249
70.0.0

Open the chart page →

15,291
iparedhat-cop1.3.91 of 1See more

ipa redhat-cop 1.3.9

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/freeipa/freeipa-server:fedora-39-4.11.1d422ee50c2c3
setuptools@67.7.2
70.0.0

Open the chart page →

951
ploigosredhat-cop0.0.91 of 2See more

ploigos redhat-cop 0.0.9

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.66722d5041b47
python-setuptools@39.2.0-5.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

11,437
sonatype-nexusredhat-cop1.1.131 of 2See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-ply@3.9-9.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-3.el8_6
python-setuptools@39.2.0-7.el8_6
python-urllib3@1.24.2-5.el8_6.1
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:3.11-10.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-7.el8_6.1
0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
70.0.0

Open the chart page →

16,047
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-ply@3.9-9.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
python39@3.9.2-1.module+el8.4.0+10237+bdc77aac
python3x-pip@20.2.4-3.module+el8.4.0+9822+20bf1249
python3x-setuptools@50.3.2-3.module+el8.4.0+9822+20bf1249
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:3.11-10.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-6.el8_4.1
0:1.25.10-3.module+el8.4.0+9822+20bf1249
0:3.9.2-2.module+el8.4.0+20027+45e0e702.2
0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1
0:50.3.2-3.module+el8.4.0+22168+8a561f05.2
70.0.0

Open the chart page →

29,227
reload-counterreload-counter0.1.01 of 1See more

reload-counter reload-counter 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
alaaamin/reload-count-tornado-py-app:v1.0.1alpine46da5844794e
setuptools@58.1.0
70.0.0

Open the chart page →

1,009
remla23-team17remla23-team171.0.02 of 2See more

remla23-team17 remla23-team17 1.0.0

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/remla23-team17/app:1.0.05816dbddf47d
setuptools@58.1.0
70.0.0
ghcr.io/remla23-team17/model-service:1.0.0aa59fe2c4f6a
setuptools@58.1.0
70.0.0

Open the chart page →

4,447
reportportalreportportal5.7.22 of 8See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
reportportal/service-auto-analyzer:5.7.295ada4a216ce
setuptools@57.5.0
70.0.0
reportportal/service-metrics-gatherer:1.1.202a0e6dc11161
setuptools@57.5.0
70.0.0

Open the chart page →

25,737
request-registryrequest-registry0.1.01 of 2See more

request-registry request-registry 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
setuptools@57.5.0
70.0.0

Open the chart page →

2,201
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
setuptools@66.1.1-1
setuptools@66.1.1
66.1.1-1+deb12u1
70.0.0

Open the chart page →

7,431
bookinforgnu1.0.01 of 7See more

bookinfo rgnu 1.0.0

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
setuptools@41.0.1
70.0.0

Open the chart page →

20,462
httpbinrgnu1.0.01 of 1See more

httpbin rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
citizenstig/httpbin:latestb81c818ccb86
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@20.7.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

11,422
istio-bookinforgnu1.0.21 of 7See more

istio-bookinfo rgnu 1.0.2

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
setuptools@41.0.1
70.0.0

Open the chart page →

20,462

Container images carrying it

1,036 by charts deploying them

A fixed version is listed for 17 of the 17 affected packages.

Container imageDigestPackageFixed inUsed by
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-3.el8_8
python-setuptools@39.2.0-7.el8
python-urllib3@1.24.2-5.el8
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-7.el8_8.1
0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
70.0.0
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-6.el8_4.1
70.0.0
1
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-7.el8_8.1
70.0.0
1
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-7.el8_8.1
70.0.0
1
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-7.el8_8.1
70.0.0
1
applariat/tx-smtp-relay:latest6bc9655d920f
setuptools@20.8.0
70.0.0
1
apsl/thumbor:6.7.051e2de5c2c70
setuptools@41.6.0
70.0.0
1
aquasec/kube-hunter:1950bf607ce9308
setuptools@40.6.2
70.0.0
1
archish27/python-fastapi-postgres:latest6610071a2101
setuptools@58.1.0
70.0.0
1
aristidetm/k8s-hub:3.3.7ccb516cb8474
setuptools@65.5.1
70.0.0
1
arunvelsriram/utils:latest655ad18fd8d6
setuptools@68.1.2
70.0.0
1
asdkant/fastapi-hello-world:latesta23d8bf7c885
setuptools@51.0.0
70.0.0
1
assistiot/authorization_db:latestc3adbab6a3e7
setuptools@50.3.2
70.0.0
1
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
setuptools@0.9.8
70.0.0
1
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
setuptools@46.1.3
70.0.0
1
assistiot/cybersecurity-monitoring_ir-elk:latest4228b7a8ef40
setuptools@39.2.0
70.0.0
1
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
setuptools@39.2.0
70.0.0
1
assistiot/fl_local_operations_inference:latest0518b63a2e69
setuptools@65.5.1
70.0.0
1
assistiot/fl_repository:latest0fce3ea719a5
setuptools@47.1.1
70.0.0
1
assistiot/fl_training_collector:latest792715dd3084
setuptools@47.1.1
70.0.0
1
assistiot/identity-manager_kc:latest0df4b4fa899a
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-7.el8_6.1
70.0.0
1
assistiot/open_api_backend:1.1.230812ba93555
setuptools@59.6.0-1.2ubuntu0.22.04.1
setuptools@69.0.2
59.6.0-1.2ubuntu0.22.04.2
70.0.0
1
assistiot/resource-provisioning_api:1.0.044a37b00d4f8
setuptools@57.5.0
70.0.0
1
assistiot/resource-provisioning_im:1.0.0a942dc14030a
setuptools@57.5.0
70.0.0
1
assistiot/resource-provisioning_prc:1.0.08b5d118bdf0e
setuptools@57.5.0
70.0.0
1
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
setuptools@57.5.0
70.0.0
1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
setuptools@57.5.0
70.0.0
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
setuptools@66.1.1-1
setuptools@66.1.1
66.1.1-1+deb12u1
70.0.0
1
assistiot/traffic-classification_api:2.0.0e32b87786142
setuptools@57.5.0
70.0.0
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
python-pip@20.0.2-5ubuntu1.8
setuptools@45.2.0-1ubuntu0.1
setuptools@67.6.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0
1
atlassian/confluence-server:7.10.03b9222ab32ef
setuptools@59.6.0-1.2
59.6.0-1.2ubuntu0.22.04.2
1
atlassian/jira-software:8.14.037bc46cbec1a
setuptools@59.6.0-1.2ubuntu0.22.04.1
59.6.0-1.2ubuntu0.22.04.2
1
avinash263/pyredis263:latestaa2b8727f1a6
setuptools@57.5.0
70.0.0
1
azhar008/flaskapplication:latesta1e827b0adea
setuptools@57.5.0
70.0.0
1
badsmoke/wunderground_exporter:0.0.5c54c004f24cc
setuptools@53.0.0
70.0.0
1
balihb/block-pvc-scanner:0.2.45b95e1cf1158
setuptools@57.5.0
70.0.0
1
balihb/pod-pvc-mapping:0.2.4ee48e79f5d76
setuptools@57.5.0
70.0.0
1
baserow/backend:1.31.1e0b3c8130b91
setuptools@66.1.1
70.0.0
1
baserow/baserow:1.30.1df0c42eb67e8
setuptools@66.1.1-1
setuptools@66.1.1
66.1.1-1+deb12u1
70.0.0
1
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
setuptools@45.2.0-1
45.2.0-1ubuntu0.2
1
bbvalabs/sensitive-data:1.0.13ea299ae63c0
setuptools@56.0.0
70.0.0
1
beanbag/reviewboard:latest6b840f546e1c
setuptools@59.6.0
70.0.0
1
behnambm/docker-sample:v1bd3ad88afff9
setuptools@65.5.1
70.0.0
1
benbusby/whoogle-search:0.5.4f77f7e6e4ad2
setuptools@57.0.0
70.0.0
1
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0
1
billimek/comcastusage-for-influxdb:latest801bba1228ac
setuptools@39.0.1
70.0.0
1
billimek/prometheus-uptimerobot-exporter:0.0.1f14ccd7aad0e
setuptools@47.1.1
70.0.0
1
billimek/sb6183-for-influxdb:latestbf8158556035
setuptools@36.5.0
70.0.0
1
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
setuptools@49.6.0
70.0.0
1
binhex/arch-qbittorrentvpn:4.5.2-1-03842d321bb8f2
setuptools@67.6.1
70.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.