CVE-2024-6345

High

Advisory

Published 15 Jul 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.8; base score, highest
EPSS: 0.019; 79th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 978; of 17,781 indexed, latest versions
Container images: 1,039; deployed by those charts
Fix available: 17 of 17; affected packages

setuptools vulnerable to Command Injection via package URL

Carried by container images the latest versions of 978 of 17,781 indexed charts deploy, on 1,039 images.

Affected package	Affected versions	Fixed in	Images
setuptoolspypi	0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+103 more	70.0.0	989
python-setuptoolsrpm	0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+3 more	0:0.9.8-7.el7_9.1, 0:39.2.0-6.el8_4.1, 0:39.2.0-7.el8_6.1, 0:39.2.0-7.el8_8.1+3 more	115
setuptoolsdeb	45.2.0-1, 45.2.0-1ubuntu0.1, 59.6.0-1.2, 59.6.0-1.2ubuntu0.22.04.1+2 more	45.2.0-1ubuntu0.2, 59.6.0-1.2ubuntu0.22.04.2, 66.1.1-1+deb12u1, 68.1.2-2ubuntu1.1	101
python-pipdeb	1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+11 more	1.5.4-1ubuntu4+esm5, 8.1.1-2ubuntu0.6+esm8, 9.0.1-2.3~ubuntu1.18.04.8+esm4, 20.0.2-5ubuntu1.10+esm2	60
python-setuptoolsdeb	3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more	3.3-1ubuntu2+esm2, 20.7.0-1ubuntu0.1~esm2, 39.0.1-2ubuntu0.1+esm1, 44.0.0-2ubuntu0.1+esm1	39
py3-setuptoolsapk	65.6.0-r0, 67.7.2-r0, 68.2.2-r0, 69.5.1-r0	70.3.0-r0	21
python-chardetrpm	3.0.4-7.el8	0:3.0.4-19.module+el8.4.0+9822+20bf1249	20
python-idnarpm	2.5-5.el8	0:2.10-3.module+el8.4.0+9822+20bf1249	20
python-pysocksrpm	1.6.8-3.el8	0:1.7.1-4.module+el8.4.0+9822+20bf1249	20
python-requestsrpm	2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8	0:2.25.0-2.module+el8.4.0+9822+20bf1249	20
python-urllib3rpm	1.24.2-5.el8, 1.24.2-5.el8_6.1	0:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1	20
python3x-setuptoolsrpm	41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+54860423	0:50.3.2-3.module+el8.4.0+22168+8a561f05.2, 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b	9
python-plyrpm	3.9-9.el8	0:3.11-10.module+el8.4.0+9822+20bf1249	7
python39rpm	3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.1	0:3.9.2-2.module+el8.4.0+20027+45e0e702.2, 0:3.9.16-1.module+el8.8.0+20025+f2100191.2	6
python3x-piprpm	19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf1249	0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c488	4
python3.11-setuptoolsrpm	65.5.1-2.el9	0:65.5.1-2.el9_4.1	1
python-wheelrpm	0.33.6-5.module+el8.4.0+8888+89bc7e79	1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1	1

OSV records: ALPINE-CVE-2024-6345 DEBIAN-CVE-2024-6345 GHSA-cx63-2mw6-8hw5 RHSA-2024:5000 RHSA-2024:5040 RHSA-2024:5078 RHSA-2024:5084 RHSA-2024:5137 RHSA-2024:5279 RHSA-2024:5530 RHSA-2024:5534 RHSA-2024:6220 RHSA-2024:6488 RHSA-2024:6662 UBUNTU-CVE-2024-6345 RLSA-2024:5530
Also known as: BIT-setuptools-2024-6345, PYSEC-2026-1918, RHSA-2024:6907, USN-7002-1

Charts affected

978 by stars

Chart

Latest

Affected images

Radar Score

fadicetic

0.3.1

4 of 25 See more

fadi cetic 0.3.1

4 of the 25 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
amancevice/superset :0.35.2	12a0a9e66550	setuptools@44.0.0	70.0.0
ceticasbl/pg-ldap-sync :latest	6c0aa7567145	setuptools@40.8.0	70.0.0
jupyterhub/k8s-hub :0.11.1	b6b4a1a34bf0	python-pip@20.0.2-5ubuntu1.1 setuptools@45.2.0-1 setuptools@51.1.2	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0
jupyterhub/k8s-singleuser-sample :0.11.1	e3e6f3051df8	setuptools@49.6.0.post20201009	70.0.0

Open the chart page →

52,919

daskhubdask

2024.1.1

3 of 9 See more

daskhub dask 2024.1.1

3 of the 9 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
pangeo/base-notebook :2024.01.15	5fbe688a4f80	setuptools@69.0.3	70.0.0
ghcr.io/dask/dask-gateway-server :2024.1.0	881e7acfc5a0	setuptools@65.5.1	70.0.0
quay.io/jupyterhub/k8s-hub :3.2.1	2528c6e57587	setuptools@65.5.1	70.0.0

Open the chart page →

14,094

seafiledatamate

0.6.0

1 of 6 See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
datamate/seafile-professional :11.0.20	2dd66b722464	setuptools@59.6.0	70.0.0

Open the chart page →

27,267

geonode-k8sgeonode-k8s

2.0.0

2 of 10 See more

geonode-k8s geonode-k8s 2.0.0

2 of the 10 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
geonode/geoserver :2.28.4-latest	81b1d431b7e9	setuptools@59.6.0	70.0.0
geopython/pycsw :3.0.0-beta2	84662ea6b78b	setuptools@66.1.1	70.0.0

Open the chart page →

13,953

karakeephelmforge

1.2.9

1 of 3 See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/browserless/chromium :v2.55.4	2ed0183564d7	setuptools@68.1.2	70.0.0

Open the chart page →

9,460

netbird-dashboardjaconi

1.2.1

1 of 1 See more

netbird-dashboard jaconi 1.2.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
netbirdio/dashboard :v2.90.2	332cc31f5f35	setuptools@52.0.0	70.0.0

Open the chart page →

585

keycloak-operatorkeycloak-operator

0.0.4

1 of 1 See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :20.0.2	b1710745fa64	python-setuptools@39.2.0-6.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0

Open the chart page →

4,652

percona-xtradb-clusterkfirfer

1.5.10

1 of 3 See more

percona-xtradb-cluster kfirfer 1.5.10

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
kfirfer/percona-xtradb-healthcheck :0.0.1	ef7b909a8e6b	setuptools@50.3.2	70.0.0

Open the chart page →

4,957

kubeflowkubeflow

1.6.2

6 of 45 See more

kubeflow kubeflow 1.6.2

6 of the 45 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
kserve/models-web-app :v0.8.0	63ea05e73842	setuptools@57.5.0	70.0.0
kubeflownotebookswg/jupyter-web-app :v1.6.1	d762690e21c1	setuptools@57.5.0	70.0.0
kubeflownotebookswg/tensorboards-web-app :v1.6.1	0876fef1973b	setuptools@57.5.0	70.0.0
kubeflownotebookswg/volumes-web-app :v1.6.1	7299fa94db15	setuptools@57.5.0	70.0.0
library/python :3.7	eedf63967cdb	setuptools@57.5.0	70.0.0
gcr.io/ml-pipeline/metadata-writer :2.0.0-alpha.5	ec3ae9f6df47	setuptools@57.5.0	70.0.0

Open the chart page →

96,941

pypiserverowkin

3.1.1

1 of 1 See more

pypiserver owkin 3.1.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
pypiserver/pypiserver :v1.3.2	303ac89b2aa2	setuptools@44.0.0	70.0.0

Open the chart page →

506

clustersecretpatrungel

0.2.0

1 of 1 See more

clustersecret patrungel 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
flag5/clustersecret :0.0.9	4ad5748bfcc6	setuptools@57.5.0	70.0.0

Open the chart page →

1,841

taigarc-helm-charts

0.1.0

2 of 7 See more

taiga rc-helm-charts 0.1.0

2 of the 7 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
taigaio/taiga-back :6.4.2	9f97323cc150	setuptools@57.5.0	70.0.0
taigaio/taiga-protected :6.4.0	36318831b3e7	setuptools@47.1.0	70.0.0

Open the chart page →

7,255

openspeedtestspeedtest

0.1.2

1 of 1 See more

openspeedtest speedtest 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
openspeedtest/latest :v2.0.0	d4d62f4b7d85	py3-setuptools@65.6.0-r0 setuptools@65.6.0	70.3.0-r0 70.0.0

Open the chart page →

2,040

netboxstartechnica

5.1.0

1 of 4 See more

netbox startechnica 5.1.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
netboxcommunity/netbox :v3.7.8-2.8.0	9bf83b350a89	setuptools@69.5.1	70.0.0

Open the chart page →

1,650

k8s-telegram-sendertelegram-sender

0.0.1

1 of 1 See more

k8s-telegram-sender telegram-sender 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
danuk/telegram-sender :0.0.1	026560388070	setuptools@58.1.0	70.0.0

Open the chart page →

3,048

grafana-pdf-exporterwiremind

2.1.1

1 of 1 See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	setuptools@66.1.1-1	66.1.1-1+deb12u1

Open the chart page →

9,746

alerta-webalerta-web

0.1.12

1 of 2 See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
hayk96/alerta-web :9.0.4	86377705e9e3	setuptools@58.1.0	70.0.0

Open the chart page →

3,569

aws-ecr-credentialarchitectminds

1.4.2

1 of 1 See more

aws-ecr-credential architectminds 1.4.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
architectminds/aws-kubectl :1.1	9735e59a1085	setuptools@41.0.1	70.0.0

Open the chart page →

1,437

openshift-consoleav1o-charts

0.3.6

1 of 1 See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	python-setuptools@39.2.0-5.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0

Open the chart page →

9,052

backup-zenbzen

0.1.4

1 of 1 See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
rezachalak/bzen-mongo :1.0.0	34f694325191	python-pip@20.0.2-5ubuntu1.9 setuptools@45.2.0-1ubuntu0.1 setuptools@45.2.0	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0

Open the chart page →

7,960

cmak-operatorcmak-operator

2.2.2

1 of 3 See more

cmak-operator cmak-operator 2.2.2

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/eshepelyuk/dckr/cmak2zk :1.2.0	22de6314c31e	setuptools@57.5.0	70.0.0

Open the chart page →

4,605

coder-observabilitycoder-observability

0.7.3

1 of 21 See more

coder-observability coder-observability 0.7.3

1 of the 21 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
kiwigrid/k8s-sidecar :1.24.3	5af76eebbba7	setuptools@65.5.1	70.0.0

Open the chart page →

24,700

codetogethercodetogether

1.4.25

1 of 1 See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
codetogether/codetogether :latest	4348c8a38752	python-setuptools@53.0.0-12.el9	0:53.0.0-12.el9_4.1

Open the chart page →

7,450

convertigoconvertigo

8.4.3

1 of 5 See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
baserow/baserow :1.30.1	df0c42eb67e8	setuptools@66.1.1-1 setuptools@66.1.1	66.1.1-1+deb12u1 70.0.0

Open the chart page →

17,404

cachetdeliveryhero

1.3.5

1 of 2 See more

cachet deliveryhero 1.3.5

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
cachethq/docker :2.3.15	a61ff0f67ea7	setuptools@33.1.1.post20171031	70.0.0

Open the chart page →

1,896

zabbix-kubernetes-discoverydjerfy

1.4.20

1 of 1 See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery :v1.4.20	7a50c07e7c69	setuptools@68.1.2	70.0.0

Open the chart page →

4,147

ecr-proxyevryfs-oss

0.2.9

1 of 1 See more

ecr-proxy evryfs-oss 0.2.9

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
esailors/aws-ecr-http-proxy :1.5.1	5608ae045fa7	setuptools@52.0.0	70.0.0

Open the chart page →

1,523

openshift-secured-appeximiait

0.5.0

1 of 1 See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:3.11-10.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-7.el8_6.1 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 70.0.0

Open the chart page →

12,042

openshift-secured-pgadmineximiait

0.2.0

2 of 2 See more

openshift-secured-pgadmin eximiait 0.2.0

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
dpage/pgadmin4 :7.5	37946e4f3e7b	py3-setuptools@67.7.2-r0 setuptools@67.7.2	70.3.0-r0 70.0.0
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:3.11-10.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-7.el8_6.1 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 70.0.0

Open the chart page →

14,546

openshift-secured-redisInsighteximiait

0.9.2

2 of 2 See more

openshift-secured-redisInsight eximiait 0.9.2

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
redislabs/redisinsight :1.14.0	b03ab1426d0d	setuptools@63.2.0	70.0.0
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:3.11-10.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-7.el8_6.1 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 70.0.0

Open the chart page →

13,874

deconzgeek-cookbook

6.5.2

1 of 1 See more

deconz geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
deconzcommunity/deconz :2.12.06	6541bbb78952	setuptools@40.8.0	70.0.0

Open the chart page →

3,555

esphomegeek-cookbook

8.4.2

1 of 1 See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
esphome/esphome :1.18.0	3f51ec10e823	setuptools@40.8.0	70.0.0

Open the chart page →

3,717

frigategeek-cookbook

8.2.2

1 of 1 See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	python-pip@20.0.2-5ubuntu1.6 setuptools@45.2.0-1 setuptools@45.2.0	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0

Open the chart page →

10,598

mealiegeek-cookbook

5.1.2

1 of 2 See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
hkotel/mealie :api-v1.0.0beta-2	a7e6b6abe087	setuptools@58.1.0	70.0.0

Open the chart page →

7,579

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	setuptools@45.2.0-1	45.2.0-1ubuntu0.2

Open the chart page →

10,154

tautulligeek-cookbook

11.4.2

1 of 1 See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	setuptools@45.2.0-1 setuptools@45.2.0	45.2.0-1ubuntu0.2 70.0.0

Open the chart page →

10,628

mlflowgetindata

0.1.2

1 of 1 See more

mlflow getindata 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
gcr.io/getindata-images-public/mlflow :latest	25d6975951f1	setuptools@65.5.1	70.0.0

Open the chart page →

2,452

nzbhydra2halkeye

2.30.1

1 of 2 See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
binhex/arch-nzbhydra2 :3.1.0-1-01	fb8952921ab6	setuptools@49.6.0	70.0.0

Open the chart page →

6,711

netbirdhelmforge

1.0.10

1 of 4 See more

netbird helmforge 1.0.10

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
netbirdio/dashboard :v2.90.10	1b59e1c905c9	setuptools@52.0.0	70.0.0

Open the chart page →

2,962

cratedbhmdmph

2.0.3

1 of 2 See more

cratedb hmdmph 2.0.3

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
library/crate :4.7.0	c7984a05e15b	setuptools@39.2.0	70.0.0

Open the chart page →

1,335

redis-pod-labelerhmdmph

1.0.2

1 of 1 See more

redis-pod-labeler hmdmph 1.0.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
hmdmph/redis-pod-labeler :1.0.0-alpine	7f1381fe0f3b	setuptools@47.1.1	70.0.0

Open the chart page →

2,985

mysql-clusterkfirfer

0.0.4

1 of 1 See more

mysql-cluster kfirfer 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
mysql/mysql-cluster :8.0.20	e4ea36622cdd	setuptools@40.8.0	70.0.0

Open the chart page →

416

kiali-operatorkiali

2.31.0

1 of 1 See more

kiali-operator kiali 2.31.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/kiali/kiali-operator :v2.31.0	f837d8f25545	setuptools@53.0.0	70.0.0

Open the chart page →

1,157

kubeviouskubevious

1.2.2

1 of 7 See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
redislabs/redisearch :2.4.14	33561794c5c8	setuptools@63.4.2	70.0.0

Open the chart page →

14,204

kubeservice-lxcfs-webhookkubservice-charts

1.6.0

1 of 6 See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
dongjiang1989/lxcfs :v6.0.3	4bf9ae391948	setuptools@45.2.0	70.0.0

Open the chart page →

11,582

memgraph-high-availabilitymemgraph

1.4.0

1 of 2 See more

memgraph-high-availability memgraph 1.4.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
memgraph/memgraph :3.13.0	a1dc375774ed	setuptools@68.1.2	70.0.0

Open the chart page →

1,373

flagsmithone-acre-fund

0.1.5

2 of 6 See more

flagsmith one-acre-fund 0.1.5

2 of the 6 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
blacktop/httpie :latest	fc5e68e2f5ab	setuptools@40.6.2	70.0.0
flagsmith/flagsmith-api :v2.6.0	fd58556339a4	setuptools@54.2.0	70.0.0

Open the chart page →

6,868

kobotoolboxone-acre-fund

0.7.4

2 of 9 See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
kobotoolbox/kobocat :2.022.24a	b15679454415	setuptools@63.2.0	70.0.0
kobotoolbox/kpi :2.022.24d	bcacc01bccd4	setuptools@63.2.0	70.0.0

Open the chart page →

18,517

open-zaakopen-zaak

0.8.0

1 of 3 See more

open-zaak open-zaak 0.8.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
openzaak/open-zaak :1.6.0	2ca2ea6e0ae9	setuptools@58.5.3	70.0.0

Open the chart page →

4,045

oesopsmx

4.0.32

8 of 25 See more

oes opsmx 4.0.32

8 of the 25 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/opsmxpublic/awsgit :v2-openssh	0d21ba756f44	setuptools@52.0.0	70.0.0
quay.io/opsmxpublic/awsgit :v3-js	15a6faada3d4	setuptools@52.0.0	70.0.0
quay.io/opsmxpublic/ubi8-gate :isd-spin-2025.10.01-5c720954-202511260810	2b3554029737	setuptools@39.2.0	70.0.0
quay.io/opsmxpublic/ubi8-oes-audit-client :isd-spin-2025.10.01-cb1bfce-202511261037	32a5b1887eab	setuptools@39.2.0	70.0.0
quay.io/opsmxpublic/ubi8-oes-autopilot :isd-spin-2025.10.01-af26a30d4-202511261054	58bd0bcf72f9	setuptools@39.2.0	70.0.0
quay.io/opsmxpublic/ubi8-oes-db :v3.0.0	89ee6493af89	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-6.el8_4.1 0:1.25.10-3.module+el8.4.0+9822+20bf1249 70.0.0
quay.io/opsmxpublic/ubi8-oes-platform :isd-spin-2025.10.01-a7c191ec-202511261122	8ed603ab7417	setuptools@39.2.0	70.0.0
quay.io/opsmxpublic/ubi8-oes-ui :isd-spin-2025.10.01-e6f6f01-202512100640	5d934bb66884	setuptools@39.2.0	70.0.0

Open the chart page →

107,811

Container images carrying it

1,039 by charts deploying them

A fixed version is listed for 17 of the 17 affected packages.

Container image	Digest	Package	Fixed in	Used by
binhex/arch-qbittorrentvpn :4.5.2-1-03	842d321bb8f2	setuptools@67.6.1	70.0.0	1
blacktop/httpie :latest	fc5e68e2f5ab	setuptools@40.6.2	70.0.0	1
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	python-pip@20.0.2-5ubuntu1.6 setuptools@45.2.0-1 setuptools@45.2.0	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0	1
bmeares/meerschaum :2.8.4	8e9c5bacaa82	setuptools@65.5.1	70.0.0	1
bnjbvr/kresus :0.22.1	37e216b182c8	setuptools@66.1.1-1 setuptools@66.1.1	66.1.1-1+deb12u1 70.0.0	1
bootc/puppetboard :1.1.0	f1383295e7be	setuptools@41.2.0	70.0.0	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	setuptools@45.2.0-1	45.2.0-1ubuntu0.2	1
bryanalves/sickrage :latest	42f0a130001d	setuptools@29.0.1.post20161130	70.0.0	1
buildkite/agent :3.25.0	aec38cfaae0e	setuptools@39.1.0.post20180508	70.0.0	1
buntha/mlflow :2.1.1	154542cc3083	setuptools@58.1.0	70.0.0	1
cadmusthefounder/lnd :take-the-helm-0.1.0	e596c5fbf80f	setuptools@58.1.0	70.0.0	1
camerahub/camerahub :0.36.23	a5af37dd6e1b	setuptools@67.7.1	70.0.0	1
camptocamp/bucket-cloner :latest	acfafc308d88	setuptools@57.4.0	70.0.0	1
camptocamp/ekorre :0.1.0	35c91d5fda04	setuptools@45.1.0	70.0.0	1
camptocamp/pghoard :10	bff736b15623	setuptools@33.1.1	70.0.0	1
camptocamp/snow-webhook :latest	2924b43dbf40	setuptools@40.8.0	70.0.0	1
castopod/castopod :1.12.10	1fd37280cbb2	setuptools@66.1.1-1	66.1.1-1+deb12u1	1
cbanuka/pythonapp :latest	c742770d4247	setuptools@29.0.1.post20161130	70.0.0	1
cdignam/kodiak :v0.54.0	5a6a55b39cee	setuptools@62.6.0	70.0.0	1
ceph/daemon :latest-nautilus	90f30824a96e	setuptools@0.9.8	70.0.0	1
ceticasbl/pg-ldap-sync :latest	6c0aa7567145	setuptools@40.8.0	70.0.0	1
chandanteekinavar/findery-market-product-service :1.0	c49ff7c141c0	setuptools@58.1.0	70.0.0	1
chaostoolkit/back :latest	734f3af86125	setuptools@50.3.2	70.0.0	1
chaostoolkit/front :latest	7f4a7eb9f7df	setuptools@50.3.2	70.0.0	1
chaostoolkit/middle :latest	b95ba4961cfc	setuptools@50.3.2	70.0.0	1
chetangautamm/repo :Opensips_Build	b4b94155ff5a	python-setuptools@3.3-1ubuntu2	3.3-1ubuntu2+esm2	1
chetangautamm/repo :sipp.v3	e7f7049e1544	setuptools@45.2.0-1	45.2.0-1ubuntu0.2	1
cheyang/distributed-tf :1.6.0	46cc34755493	setuptools@38.5.1	70.0.0	1
chorss/docker-pgadmin4 :4.11	5c549cacb8ab	setuptools@41.0.1	70.0.0	1
chubaofs/cfs-client :3.2.0	15ff74209ce7	setuptools@52.0.0	70.0.0	1
chubaofs/cfs-server :3.2.0	205030e045f2	setuptools@52.0.0	70.0.0	1
citizenstig/httpbin :latest	b81c818ccb86	python-pip@8.1.1-2ubuntu0.4 python-setuptools@20.7.0-1 setuptools@20.7.0	8.1.1-2ubuntu0.6+esm8 20.7.0-1ubuntu0.1~esm2 70.0.0	1
ckan/ckan-base-datapusher :0.0.21	84d11924549f	setuptools@52.0.0	70.0.0	1
cleveritcz/opencve :1.5.0	c75c1636e0b7	setuptools@56.0.0	70.0.0	1
cloudve/janis-terminal :latest	af56e77ca587	python-pip@9.0.1-2.3~ubuntu1.18.04.1 python-setuptools@39.0.1-2 setuptools@39.0.1	9.0.1-2.3~ubuntu1.18.04.8+esm4 39.0.1-2ubuntu0.1+esm1 70.0.0	1
cloudve/ttyd :latest	d79c1c5881c0	setuptools@46.4.0.post20200518	70.0.0	1
clsen2024/daejeon_2-3 :latest	1156cd87c8fb	setuptools@58.1.0	70.0.0	1
clsen2024/gwangju_2-3 :service-b-1	0ba9eff852c5	setuptools@58.1.0	70.0.0	1
clsen2024/gwangju_2-3 :service-a-1	51b1d45961cd	setuptools@58.1.0	70.0.0	1
clsen2024/gwangju_2-3 :service-c-1	efb1586c8299	setuptools@58.1.0	70.0.0	1
cockroachdb/cockroach-operator :v2.1.0	983312754620	python-setuptools@39.2.0-6.el8 setuptools@39.2.0	0:39.2.0-6.el8_4.1 70.0.0	1
codaprotocol/buildkite-exporter :0.2.1	37c68e67a401	setuptools@52.0.0	70.0.0	1
codaprotocol/coda-user-agent :0.1.5	4ba4dd3a041f	setuptools@45.2.0	70.0.0	1
codecov/self-hosted-api :24.4.1	0475cb1c3136	setuptools@59.6.0	70.0.0	1
codecov/self-hosted-worker :24.4.1	837f546b479b	setuptools@69.2.0	70.0.0	1
codekoala/pypi :1.2.1	4a999b2cfff2	setuptools@29.0.1.post20161130	70.0.0	1
coderenvs/coder-service :1.44.6	1deffc4670e6	python-setuptools@39.2.0-7.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0	1
coderenvs/timescale :1.44.6	76fd37fe6830	python-setuptools@39.2.0-7.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0	1
codetogether/codetogether :latest	4348c8a38752	python-setuptools@53.0.0-12.el9	0:53.0.0-12.el9_4.1	1
confluentinc/cp-enterprise-control-center :6.1.0	f2975d507a2a	python-setuptools@39.2.0-6.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0	1