CVE-2024-6345

High

Advisory

Published 15 Jul 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.8; base score, highest
EPSS: 0.019; 79th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 978; of 17,781 indexed, latest versions
Container images: 1,039; deployed by those charts
Fix available: 17 of 17; affected packages

setuptools vulnerable to Command Injection via package URL

Carried by container images the latest versions of 978 of 17,781 indexed charts deploy, on 1,039 images.

Affected package	Affected versions	Fixed in	Images
setuptoolspypi	0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+103 more	70.0.0	989
python-setuptoolsrpm	0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+3 more	0:0.9.8-7.el7_9.1, 0:39.2.0-6.el8_4.1, 0:39.2.0-7.el8_6.1, 0:39.2.0-7.el8_8.1+3 more	115
setuptoolsdeb	45.2.0-1, 45.2.0-1ubuntu0.1, 59.6.0-1.2, 59.6.0-1.2ubuntu0.22.04.1+2 more	45.2.0-1ubuntu0.2, 59.6.0-1.2ubuntu0.22.04.2, 66.1.1-1+deb12u1, 68.1.2-2ubuntu1.1	101
python-pipdeb	1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+11 more	1.5.4-1ubuntu4+esm5, 8.1.1-2ubuntu0.6+esm8, 9.0.1-2.3~ubuntu1.18.04.8+esm4, 20.0.2-5ubuntu1.10+esm2	60
python-setuptoolsdeb	3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more	3.3-1ubuntu2+esm2, 20.7.0-1ubuntu0.1~esm2, 39.0.1-2ubuntu0.1+esm1, 44.0.0-2ubuntu0.1+esm1	39
py3-setuptoolsapk	65.6.0-r0, 67.7.2-r0, 68.2.2-r0, 69.5.1-r0	70.3.0-r0	21
python-chardetrpm	3.0.4-7.el8	0:3.0.4-19.module+el8.4.0+9822+20bf1249	20
python-idnarpm	2.5-5.el8	0:2.10-3.module+el8.4.0+9822+20bf1249	20
python-pysocksrpm	1.6.8-3.el8	0:1.7.1-4.module+el8.4.0+9822+20bf1249	20
python-requestsrpm	2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8	0:2.25.0-2.module+el8.4.0+9822+20bf1249	20
python-urllib3rpm	1.24.2-5.el8, 1.24.2-5.el8_6.1	0:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1	20
python3x-setuptoolsrpm	41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+54860423	0:50.3.2-3.module+el8.4.0+22168+8a561f05.2, 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b	9
python-plyrpm	3.9-9.el8	0:3.11-10.module+el8.4.0+9822+20bf1249	7
python39rpm	3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.1	0:3.9.2-2.module+el8.4.0+20027+45e0e702.2, 0:3.9.16-1.module+el8.8.0+20025+f2100191.2	6
python3x-piprpm	19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf1249	0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c488	4
python3.11-setuptoolsrpm	65.5.1-2.el9	0:65.5.1-2.el9_4.1	1
python-wheelrpm	0.33.6-5.module+el8.4.0+8888+89bc7e79	1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1	1

OSV records: ALPINE-CVE-2024-6345 DEBIAN-CVE-2024-6345 GHSA-cx63-2mw6-8hw5 RHSA-2024:5000 RHSA-2024:5040 RHSA-2024:5078 RHSA-2024:5084 RHSA-2024:5137 RHSA-2024:5279 RHSA-2024:5530 RHSA-2024:5534 RHSA-2024:6220 RHSA-2024:6488 RHSA-2024:6662 UBUNTU-CVE-2024-6345 RLSA-2024:5530
Also known as: BIT-setuptools-2024-6345, PYSEC-2026-1918, RHSA-2024:6907, USN-7002-1

Charts affected

978 by stars

Chart

Latest

Affected images

Radar Score

fadicetic

0.3.1

4 of 25 See more

fadi cetic 0.3.1

4 of the 25 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
amancevice/superset :0.35.2	12a0a9e66550	setuptools@44.0.0	70.0.0
ceticasbl/pg-ldap-sync :latest	6c0aa7567145	setuptools@40.8.0	70.0.0
jupyterhub/k8s-hub :0.11.1	b6b4a1a34bf0	python-pip@20.0.2-5ubuntu1.1 setuptools@45.2.0-1 setuptools@51.1.2	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0
jupyterhub/k8s-singleuser-sample :0.11.1	e3e6f3051df8	setuptools@49.6.0.post20201009	70.0.0

Open the chart page →

52,919

daskhubdask

2024.1.1

3 of 9 See more

daskhub dask 2024.1.1

3 of the 9 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
pangeo/base-notebook :2024.01.15	5fbe688a4f80	setuptools@69.0.3	70.0.0
ghcr.io/dask/dask-gateway-server :2024.1.0	881e7acfc5a0	setuptools@65.5.1	70.0.0
quay.io/jupyterhub/k8s-hub :3.2.1	2528c6e57587	setuptools@65.5.1	70.0.0

Open the chart page →

14,094

seafiledatamate

0.6.0

1 of 6 See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
datamate/seafile-professional :11.0.20	2dd66b722464	setuptools@59.6.0	70.0.0

Open the chart page →

27,267

geonode-k8sgeonode-k8s

2.0.0

2 of 10 See more

geonode-k8s geonode-k8s 2.0.0

2 of the 10 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
geonode/geoserver :2.28.4-latest	81b1d431b7e9	setuptools@59.6.0	70.0.0
geopython/pycsw :3.0.0-beta2	84662ea6b78b	setuptools@66.1.1	70.0.0

Open the chart page →

13,953

karakeephelmforge

1.2.9

1 of 3 See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/browserless/chromium :v2.55.4	2ed0183564d7	setuptools@68.1.2	70.0.0

Open the chart page →

9,460

netbird-dashboardjaconi

1.2.1

1 of 1 See more

netbird-dashboard jaconi 1.2.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
netbirdio/dashboard :v2.90.2	332cc31f5f35	setuptools@52.0.0	70.0.0

Open the chart page →

585

keycloak-operatorkeycloak-operator

0.0.4

1 of 1 See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :20.0.2	b1710745fa64	python-setuptools@39.2.0-6.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0

Open the chart page →

4,652

percona-xtradb-clusterkfirfer

1.5.10

1 of 3 See more

percona-xtradb-cluster kfirfer 1.5.10

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
kfirfer/percona-xtradb-healthcheck :0.0.1	ef7b909a8e6b	setuptools@50.3.2	70.0.0

Open the chart page →

4,957

kubeflowkubeflow

1.6.2

6 of 45 See more

kubeflow kubeflow 1.6.2

6 of the 45 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
kserve/models-web-app :v0.8.0	63ea05e73842	setuptools@57.5.0	70.0.0
kubeflownotebookswg/jupyter-web-app :v1.6.1	d762690e21c1	setuptools@57.5.0	70.0.0
kubeflownotebookswg/tensorboards-web-app :v1.6.1	0876fef1973b	setuptools@57.5.0	70.0.0
kubeflownotebookswg/volumes-web-app :v1.6.1	7299fa94db15	setuptools@57.5.0	70.0.0
library/python :3.7	eedf63967cdb	setuptools@57.5.0	70.0.0
gcr.io/ml-pipeline/metadata-writer :2.0.0-alpha.5	ec3ae9f6df47	setuptools@57.5.0	70.0.0

Open the chart page →

96,941

pypiserverowkin

3.1.1

1 of 1 See more

pypiserver owkin 3.1.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
pypiserver/pypiserver :v1.3.2	303ac89b2aa2	setuptools@44.0.0	70.0.0

Open the chart page →

506

clustersecretpatrungel

0.2.0

1 of 1 See more

clustersecret patrungel 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
flag5/clustersecret :0.0.9	4ad5748bfcc6	setuptools@57.5.0	70.0.0

Open the chart page →

1,841

taigarc-helm-charts

0.1.0

2 of 7 See more

taiga rc-helm-charts 0.1.0

2 of the 7 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
taigaio/taiga-back :6.4.2	9f97323cc150	setuptools@57.5.0	70.0.0
taigaio/taiga-protected :6.4.0	36318831b3e7	setuptools@47.1.0	70.0.0

Open the chart page →

7,255

openspeedtestspeedtest

0.1.2

1 of 1 See more

openspeedtest speedtest 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
openspeedtest/latest :v2.0.0	d4d62f4b7d85	py3-setuptools@65.6.0-r0 setuptools@65.6.0	70.3.0-r0 70.0.0

Open the chart page →

2,040

netboxstartechnica

5.1.0

1 of 4 See more

netbox startechnica 5.1.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
netboxcommunity/netbox :v3.7.8-2.8.0	9bf83b350a89	setuptools@69.5.1	70.0.0

Open the chart page →

1,650

k8s-telegram-sendertelegram-sender

0.0.1

1 of 1 See more

k8s-telegram-sender telegram-sender 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
danuk/telegram-sender :0.0.1	026560388070	setuptools@58.1.0	70.0.0

Open the chart page →

3,048

grafana-pdf-exporterwiremind

2.1.1

1 of 1 See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	setuptools@66.1.1-1	66.1.1-1+deb12u1

Open the chart page →

9,746

alerta-webalerta-web

0.1.12

1 of 2 See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
hayk96/alerta-web :9.0.4	86377705e9e3	setuptools@58.1.0	70.0.0

Open the chart page →

3,569

aws-ecr-credentialarchitectminds

1.4.2

1 of 1 See more

aws-ecr-credential architectminds 1.4.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
architectminds/aws-kubectl :1.1	9735e59a1085	setuptools@41.0.1	70.0.0

Open the chart page →

1,437

openshift-consoleav1o-charts

0.3.6

1 of 1 See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	python-setuptools@39.2.0-5.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0

Open the chart page →

9,052

backup-zenbzen

0.1.4

1 of 1 See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
rezachalak/bzen-mongo :1.0.0	34f694325191	python-pip@20.0.2-5ubuntu1.9 setuptools@45.2.0-1ubuntu0.1 setuptools@45.2.0	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0

Open the chart page →

7,960

cmak-operatorcmak-operator

2.2.2

1 of 3 See more

cmak-operator cmak-operator 2.2.2

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/eshepelyuk/dckr/cmak2zk :1.2.0	22de6314c31e	setuptools@57.5.0	70.0.0

Open the chart page →

4,605

coder-observabilitycoder-observability

0.7.3

1 of 21 See more

coder-observability coder-observability 0.7.3

1 of the 21 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
kiwigrid/k8s-sidecar :1.24.3	5af76eebbba7	setuptools@65.5.1	70.0.0

Open the chart page →

24,700

codetogethercodetogether

1.4.25

1 of 1 See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
codetogether/codetogether :latest	4348c8a38752	python-setuptools@53.0.0-12.el9	0:53.0.0-12.el9_4.1

Open the chart page →

7,450

convertigoconvertigo

8.4.3

1 of 5 See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
baserow/baserow :1.30.1	df0c42eb67e8	setuptools@66.1.1-1 setuptools@66.1.1	66.1.1-1+deb12u1 70.0.0

Open the chart page →

17,404

cachetdeliveryhero

1.3.5

1 of 2 See more

cachet deliveryhero 1.3.5

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
cachethq/docker :2.3.15	a61ff0f67ea7	setuptools@33.1.1.post20171031	70.0.0

Open the chart page →

1,896

zabbix-kubernetes-discoverydjerfy

1.4.20

1 of 1 See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery :v1.4.20	7a50c07e7c69	setuptools@68.1.2	70.0.0

Open the chart page →

4,147

ecr-proxyevryfs-oss

0.2.9

1 of 1 See more

ecr-proxy evryfs-oss 0.2.9

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
esailors/aws-ecr-http-proxy :1.5.1	5608ae045fa7	setuptools@52.0.0	70.0.0

Open the chart page →

1,523

openshift-secured-appeximiait

0.5.0

1 of 1 See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:3.11-10.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-7.el8_6.1 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 70.0.0

Open the chart page →

12,042

openshift-secured-pgadmineximiait

0.2.0

2 of 2 See more

openshift-secured-pgadmin eximiait 0.2.0

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
dpage/pgadmin4 :7.5	37946e4f3e7b	py3-setuptools@67.7.2-r0 setuptools@67.7.2	70.3.0-r0 70.0.0
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:3.11-10.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-7.el8_6.1 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 70.0.0

Open the chart page →

14,546

openshift-secured-redisInsighteximiait

0.9.2

2 of 2 See more

openshift-secured-redisInsight eximiait 0.9.2

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
redislabs/redisinsight :1.14.0	b03ab1426d0d	setuptools@63.2.0	70.0.0
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:3.11-10.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-7.el8_6.1 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 70.0.0

Open the chart page →

13,874

deconzgeek-cookbook

6.5.2

1 of 1 See more

deconz geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
deconzcommunity/deconz :2.12.06	6541bbb78952	setuptools@40.8.0	70.0.0

Open the chart page →

3,555

esphomegeek-cookbook

8.4.2

1 of 1 See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
esphome/esphome :1.18.0	3f51ec10e823	setuptools@40.8.0	70.0.0

Open the chart page →

3,717

frigategeek-cookbook

8.2.2

1 of 1 See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	python-pip@20.0.2-5ubuntu1.6 setuptools@45.2.0-1 setuptools@45.2.0	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0

Open the chart page →

10,598

mealiegeek-cookbook

5.1.2

1 of 2 See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
hkotel/mealie :api-v1.0.0beta-2	a7e6b6abe087	setuptools@58.1.0	70.0.0

Open the chart page →

7,579

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	setuptools@45.2.0-1	45.2.0-1ubuntu0.2

Open the chart page →

10,154

tautulligeek-cookbook

11.4.2

1 of 1 See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	setuptools@45.2.0-1 setuptools@45.2.0	45.2.0-1ubuntu0.2 70.0.0

Open the chart page →

10,628

mlflowgetindata

0.1.2

1 of 1 See more

mlflow getindata 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
gcr.io/getindata-images-public/mlflow :latest	25d6975951f1	setuptools@65.5.1	70.0.0

Open the chart page →

2,452

nzbhydra2halkeye

2.30.1

1 of 2 See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
binhex/arch-nzbhydra2 :3.1.0-1-01	fb8952921ab6	setuptools@49.6.0	70.0.0

Open the chart page →

6,711

netbirdhelmforge

1.0.10

1 of 4 See more

netbird helmforge 1.0.10

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
netbirdio/dashboard :v2.90.10	1b59e1c905c9	setuptools@52.0.0	70.0.0

Open the chart page →

2,962

cratedbhmdmph

2.0.3

1 of 2 See more

cratedb hmdmph 2.0.3

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
library/crate :4.7.0	c7984a05e15b	setuptools@39.2.0	70.0.0

Open the chart page →

1,335

redis-pod-labelerhmdmph

1.0.2

1 of 1 See more

redis-pod-labeler hmdmph 1.0.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
hmdmph/redis-pod-labeler :1.0.0-alpine	7f1381fe0f3b	setuptools@47.1.1	70.0.0

Open the chart page →

2,985

mysql-clusterkfirfer

0.0.4

1 of 1 See more

mysql-cluster kfirfer 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
mysql/mysql-cluster :8.0.20	e4ea36622cdd	setuptools@40.8.0	70.0.0

Open the chart page →

416

kiali-operatorkiali

2.31.0

1 of 1 See more

kiali-operator kiali 2.31.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/kiali/kiali-operator :v2.31.0	f837d8f25545	setuptools@53.0.0	70.0.0

Open the chart page →

1,157

kubeviouskubevious

1.2.2

1 of 7 See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
redislabs/redisearch :2.4.14	33561794c5c8	setuptools@63.4.2	70.0.0

Open the chart page →

14,204

kubeservice-lxcfs-webhookkubservice-charts

1.6.0

1 of 6 See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
dongjiang1989/lxcfs :v6.0.3	4bf9ae391948	setuptools@45.2.0	70.0.0

Open the chart page →

11,582

memgraph-high-availabilitymemgraph

1.4.0

1 of 2 See more

memgraph-high-availability memgraph 1.4.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
memgraph/memgraph :3.13.0	a1dc375774ed	setuptools@68.1.2	70.0.0

Open the chart page →

1,373

flagsmithone-acre-fund

0.1.5

2 of 6 See more

flagsmith one-acre-fund 0.1.5

2 of the 6 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
blacktop/httpie :latest	fc5e68e2f5ab	setuptools@40.6.2	70.0.0
flagsmith/flagsmith-api :v2.6.0	fd58556339a4	setuptools@54.2.0	70.0.0

Open the chart page →

6,868

kobotoolboxone-acre-fund

0.7.4

2 of 9 See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
kobotoolbox/kobocat :2.022.24a	b15679454415	setuptools@63.2.0	70.0.0
kobotoolbox/kpi :2.022.24d	bcacc01bccd4	setuptools@63.2.0	70.0.0

Open the chart page →

18,517

open-zaakopen-zaak

0.8.0

1 of 3 See more

open-zaak open-zaak 0.8.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
openzaak/open-zaak :1.6.0	2ca2ea6e0ae9	setuptools@58.5.3	70.0.0

Open the chart page →

4,045

oesopsmx

4.0.32

8 of 25 See more

oes opsmx 4.0.32

8 of the 25 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/opsmxpublic/awsgit :v2-openssh	0d21ba756f44	setuptools@52.0.0	70.0.0
quay.io/opsmxpublic/awsgit :v3-js	15a6faada3d4	setuptools@52.0.0	70.0.0
quay.io/opsmxpublic/ubi8-gate :isd-spin-2025.10.01-5c720954-202511260810	2b3554029737	setuptools@39.2.0	70.0.0
quay.io/opsmxpublic/ubi8-oes-audit-client :isd-spin-2025.10.01-cb1bfce-202511261037	32a5b1887eab	setuptools@39.2.0	70.0.0
quay.io/opsmxpublic/ubi8-oes-autopilot :isd-spin-2025.10.01-af26a30d4-202511261054	58bd0bcf72f9	setuptools@39.2.0	70.0.0
quay.io/opsmxpublic/ubi8-oes-db :v3.0.0	89ee6493af89	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-6.el8_4.1 0:1.25.10-3.module+el8.4.0+9822+20bf1249 70.0.0
quay.io/opsmxpublic/ubi8-oes-platform :isd-spin-2025.10.01-a7c191ec-202511261122	8ed603ab7417	setuptools@39.2.0	70.0.0
quay.io/opsmxpublic/ubi8-oes-ui :isd-spin-2025.10.01-e6f6f01-202512100640	5d934bb66884	setuptools@39.2.0	70.0.0

Open the chart page →

107,811

Container images carrying it

1,039 by charts deploying them

A fixed version is listed for 17 of the 17 affected packages.

Container image	Digest	Package	Fixed in	Used by
apecloud/kb-cloud-installer :v2.1.42-certified	98abc64aa985	setuptools@53.0.0	70.0.0	1
apecloud/smartfs-csi-driver :0.1.1	ff2858eab9cc	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-setuptools@39.2.0-7.el8 python-urllib3@1.24.2-5.el8 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-7.el8_8.1 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 70.0.0	1
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	python-setuptools@39.2.0-6.el8 setuptools@39.2.0	0:39.2.0-6.el8_4.1 70.0.0	1
apicurio/apicurio-studio-api :0.2.62.Final	302d202ed149	python-setuptools@39.2.0-7.el8 setuptools@39.2.0	0:39.2.0-7.el8_8.1 70.0.0	1
apicurio/apicurio-studio-ui :0.2.62.Final	349c845270c2	python-setuptools@39.2.0-7.el8 setuptools@39.2.0	0:39.2.0-7.el8_8.1 70.0.0	1
apicurio/apicurio-studio-ws :0.2.62.Final	27a91978a388	python-setuptools@39.2.0-7.el8 setuptools@39.2.0	0:39.2.0-7.el8_8.1 70.0.0	1
applariat/tx-smtp-relay :latest	6bc9655d920f	setuptools@20.8.0	70.0.0	1
apsl/thumbor :6.7.0	51e2de5c2c70	setuptools@41.6.0	70.0.0	1
aquasec/kube-hunter :195	0bf607ce9308	setuptools@40.6.2	70.0.0	1
archish27/python-fastapi-postgres :latest	6610071a2101	setuptools@58.1.0	70.0.0	1
aristidetm/k8s-hub :3.3.7	ccb516cb8474	setuptools@65.5.1	70.0.0	1
arunvelsriram/utils :latest	655ad18fd8d6	setuptools@68.1.2	70.0.0	1
asdkant/fastapi-hello-world :latest	a23d8bf7c885	setuptools@51.0.0	70.0.0	1
assistiot/authorization_db :latest	c3adbab6a3e7	setuptools@50.3.2	70.0.0	1
assistiot/cybersecurity-monitoring_id-elk :latest	ba1d85ec3739	setuptools@0.9.8	70.0.0	1
assistiot/cybersecurity-monitoring_id-wzh :latest	0aacefac9677	setuptools@46.1.3	70.0.0	1
assistiot/cybersecurity-monitoring_ir-elk :latest	4228b7a8ef40	setuptools@39.2.0	70.0.0	1
assistiot/cybersecurity-monitoring_ir-kbn :latest	0570b27bb7c2	setuptools@39.2.0	70.0.0	1
assistiot/fl_local_operations_inference :latest	0518b63a2e69	setuptools@65.5.1	70.0.0	1
assistiot/fl_repository :latest	0fce3ea719a5	setuptools@47.1.1	70.0.0	1
assistiot/fl_training_collector :latest	792715dd3084	setuptools@47.1.1	70.0.0	1
assistiot/identity-manager_kc :latest	0df4b4fa899a	python-setuptools@39.2.0-6.el8 setuptools@39.2.0	0:39.2.0-7.el8_6.1 70.0.0	1
assistiot/open_api_backend :1.1.2	30812ba93555	setuptools@59.6.0-1.2ubuntu0.22.04.1 setuptools@69.0.2	59.6.0-1.2ubuntu0.22.04.2 70.0.0	1
assistiot/resource-provisioning_api :1.0.0	44a37b00d4f8	setuptools@57.5.0	70.0.0	1
assistiot/resource-provisioning_im :1.0.0	a942dc14030a	setuptools@57.5.0	70.0.0	1
assistiot/resource-provisioning_prc :1.0.0	8b5d118bdf0e	setuptools@57.5.0	70.0.0	1
assistiot/smart-orchestrator_mcs :latest	7d6a0d534c7f	setuptools@57.5.0	70.0.0	1
assistiot/smart-orchestrator_scheduler :latest	38b003e55ff3	setuptools@57.5.0	70.0.0	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	setuptools@66.1.1-1 setuptools@66.1.1	66.1.1-1+deb12u1 70.0.0	1
assistiot/traffic-classification_api :2.0.0	e32b87786142	setuptools@57.5.0	70.0.0	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	python-pip@20.0.2-5ubuntu1.8 setuptools@45.2.0-1ubuntu0.1 setuptools@67.6.0	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	setuptools@59.6.0-1.2	59.6.0-1.2ubuntu0.22.04.2	1
atlassian/jira-software :8.14.0	37bc46cbec1a	setuptools@59.6.0-1.2ubuntu0.22.04.1	59.6.0-1.2ubuntu0.22.04.2	1
avinash263/pyredis263 :latest	aa2b8727f1a6	setuptools@57.5.0	70.0.0	1
azhar008/flaskapplication :latest	a1e827b0adea	setuptools@57.5.0	70.0.0	1
badsmoke/wunderground_exporter :0.0.5	c54c004f24cc	setuptools@53.0.0	70.0.0	1
balihb/block-pvc-scanner :0.2.4	5b95e1cf1158	setuptools@57.5.0	70.0.0	1
balihb/pod-pvc-mapping :0.2.4	ee48e79f5d76	setuptools@57.5.0	70.0.0	1
baserow/backend :1.31.1	e0b3c8130b91	setuptools@66.1.1	70.0.0	1
baserow/baserow :1.30.1	df0c42eb67e8	setuptools@66.1.1-1 setuptools@66.1.1	66.1.1-1+deb12u1 70.0.0	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	setuptools@45.2.0-1	45.2.0-1ubuntu0.2	1
bbvalabs/sensitive-data :1.0.1	3ea299ae63c0	setuptools@56.0.0	70.0.0	1
beanbag/reviewboard :latest	6b840f546e1c	setuptools@59.6.0	70.0.0	1
behnambm/docker-sample :v1	bd3ad88afff9	setuptools@65.5.1	70.0.0	1
benbusby/whoogle-search :0.5.4	f77f7e6e4ad2	setuptools@57.0.0	70.0.0	1
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	python-pip@20.0.2-5ubuntu1.6 setuptools@45.2.0-1 setuptools@45.2.0	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0	1
billimek/comcastusage-for-influxdb :latest	801bba1228ac	setuptools@39.0.1	70.0.0	1
billimek/prometheus-uptimerobot-exporter :0.0.1	f14ccd7aad0e	setuptools@47.1.1	70.0.0	1
billimek/sb6183-for-influxdb :latest	bf8158556035	setuptools@36.5.0	70.0.0	1
binhex/arch-nzbhydra2 :3.1.0-1-01	fb8952921ab6	setuptools@49.6.0	70.0.0	1