StackRadar

CVE-2024-6345

High

Advisory

Published 15 Jul 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.019
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
986
of 17,787 indexed, latest versions
Container images
1,047
deployed by those charts
Fix available
17 of 17
affected packages

setuptools vulnerable to Command Injection via package URL

Carried by container images the latest versions of 986 of 17,787 indexed charts deploy, on 1,047 images.

Affected packageAffected versionsFixed inImages
setuptoolspypi0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+104 more70.0.0997
python-setuptoolsrpm0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+3 more0:0.9.8-7.el7_9.1, 0:39.2.0-6.el8_4.1, 0:39.2.0-7.el8_6.1, 0:39.2.0-7.el8_8.1+3 more117
setuptoolsdeb45.2.0-1, 45.2.0-1ubuntu0.1, 59.6.0-1.2, 59.6.0-1.2ubuntu0.22.04.1+2 more45.2.0-1ubuntu0.2, 59.6.0-1.2ubuntu0.22.04.2, 66.1.1-1+deb12u1, 68.1.2-2ubuntu1.1102
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+11 more1.5.4-1ubuntu4+esm5, 8.1.1-2ubuntu0.6+esm8, 9.0.1-2.3~ubuntu1.18.04.8+esm4, 20.0.2-5ubuntu1.10+esm260
python-setuptoolsdeb3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more3.3-1ubuntu2+esm2, 20.7.0-1ubuntu0.1~esm2, 39.0.1-2ubuntu0.1+esm1, 44.0.0-2ubuntu0.1+esm139
py3-setuptoolsapk65.6.0-r0, 67.7.2-r0, 68.2.2-r0, 69.5.1-r070.3.0-r021
python-chardetrpm3.0.4-7.el80:3.0.4-19.module+el8.4.0+9822+20bf124920
python-idnarpm2.5-5.el80:2.10-3.module+el8.4.0+9822+20bf124920
python-pysocksrpm1.6.8-3.el80:1.7.1-4.module+el8.4.0+9822+20bf124920
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_80:2.25.0-2.module+el8.4.0+9822+20bf124920
python-urllib3rpm1.24.2-5.el8, 1.24.2-5.el8_6.10:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be120
python3x-setuptoolsrpm41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+548604230:50.3.2-3.module+el8.4.0+22168+8a561f05.2, 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b9
python-plyrpm3.9-9.el80:3.11-10.module+el8.4.0+9822+20bf12497
python39rpm3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.10:3.9.2-2.module+el8.4.0+20027+45e0e702.2, 0:3.9.16-1.module+el8.8.0+20025+f2100191.26
python3x-piprpm19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf12490:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c4884
python3.11-setuptoolsrpm65.5.1-2.el90:65.5.1-2.el9_4.11
python-wheelrpm0.33.6-5.module+el8.4.0+8888+89bc7e791:0.35.1-3.module+el8.4.0+15042+dc5a279b.11
OSV records
ALPINE-CVE-2024-6345DEBIAN-CVE-2024-6345GHSA-cx63-2mw6-8hw5RHSA-2024:5000RHSA-2024:5040RHSA-2024:5078RHSA-2024:5084RHSA-2024:5137RHSA-2024:5279RHSA-2024:5530RHSA-2024:5534RHSA-2024:6220RHSA-2024:6488RHSA-2024:6662UBUNTU-CVE-2024-6345RLSA-2024:5530
Also known as
BIT-setuptools-2024-6345, PYSEC-2026-1918, RHSA-2024:6907, USN-7002-1

Charts affected

986 by stars
ChartLatestAffected imagesRadar Score
dmaap-listenersmo-helm-chart6.0.01 of 3See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@40.8.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

25,769
elasticsearchsmo-helm-chart6.0.01 of 5See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@40.8.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

24,776
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@39.0.1
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

29,220
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@40.8.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

24,776
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@39.0.1
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

27,477
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@39.0.1
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

27,477
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@39.0.1
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

29,220
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@39.0.1
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

27,477
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@40.8.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

25,769
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@40.8.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

25,769
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@40.8.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

25,769
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@40.8.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

24,776
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@40.8.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

24,776
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@40.8.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0

Open the chart page →

25,769
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
helga09/my_sql_shoes:v1.1.1a03657d97897
setuptools@50.3.2
70.0.0

Open the chart page →

7,574
gar-exportersoftonic0.1.11 of 1See more

gar-exporter softonic 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
softonic/gar-exporter:0.2.1a64d6c0e0ae5
setuptools@50.3.2
70.0.0

Open the chart page →

2,296
pwssoketi0.2.41 of 1See more

pws soketi 0.2.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/soketi/pws:0.8-16-alpine399d2e6b10ef
setuptools@58.2.0
70.0.0

Open the chart page →

3,228
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
setuptools@59.6.0-1.2
59.6.0-1.2ubuntu0.22.04.2

Open the chart page →

13,605
atlassian-jirasomeblackmagic3.3.21 of 1See more

atlassian-jira someblackmagic 3.3.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
atlassian/jira-software:8.14.037bc46cbec1a
setuptools@59.6.0-1.2ubuntu0.22.04.1
59.6.0-1.2ubuntu0.22.04.2

Open the chart page →

13,079
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

30,687
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
setuptools@57.5.0
70.0.0

Open the chart page →

11,888
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e11 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.19.2-branch.hotfix-2.19.1.124125-665e7e1b696ac5022ab
setuptools@66.1.1
70.0.0

Open the chart page →

16,368
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb1 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2faf1508c1d3
setuptools@66.1.1
70.0.0

Open the chart page →

16,400
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f81 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.17.14-branch.testing.72707.921a5f8ff1641ac3f1b
setuptools@66.1.1
70.0.0

Open the chart page →

14,679
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091141 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.20.6-branch.testing1.154030-9b09114738c77eb6f97
setuptools@66.1.1
70.0.0

Open the chart page →

16,400
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4691 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.11-branch.testing2.88634-335d469d6790a97ad47
setuptools@66.1.1
70.0.0

Open the chart page →

14,221
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3411 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.12-branch.testing3.88744-f55b34181335b40696a
setuptools@66.1.1
70.0.0

Open the chart page →

14,221
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b21 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.20.2-branch.testing4.134160-9fad4b23c8fbe855665
setuptools@66.1.1
70.0.0

Open the chart page →

16,019
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef1 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.21.3-branch.testing5.219631-2153befcf72ad0f25fb
setuptools@66.1.1
70.0.0

Open the chart page →

15,635
speedtest-exporterspeedtest-exporter0.2.21 of 1See more

speedtest-exporter speedtest-exporter 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/miguelndecarvalho/speedtest-exporter:v3.5.4f1064d49124c
setuptools@65.5.0
70.0.0

Open the chart page →

741
ambassador-manifestssqream-chartsVerified publisher0.6.31 of 1See more

ambassador-manifests sqream-charts 0.6.3

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
datawire/aes:3.11.195ec30b3c732
setuptools@69.5.1
70.0.0

Open the chart page →

2,416
downscalersqream-chartsVerified publisher1.0.01 of 1See more

downscaler sqream-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.05d328c003efe
setuptools@65.5.1
70.0.0

Open the chart page →

1,009
servicexssl-hep1.8.53 of 16See more

servicex ssl-hep 1.8.5

3 of the 16 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ncsa/checks:main0b738bbc8d70
setuptools@65.5.1
70.0.0
sslhep/servicex-did-finder:v1.8.5ab0090083567
setuptools@53.0.0
70.0.0
sslhep/x509-secrets:v1.8.5d9e9ecb12d59
setuptools@53.0.0
70.0.0

Open the chart page →

66,266
allurestakaterVerified publisher1.0.11 of 1See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-ply@3.9-9.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:3.11-10.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-6.el8_4.1
0:1.25.10-3.module+el8.4.0+9822+20bf1249
70.0.0

Open the chart page →

28,165
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review:1.0.35954d2be66e95
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-7.el8_6.1
70.0.0

Open the chart page →

11,554
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review:1.0.35954d2be66e95
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-7.el8_6.1
70.0.0

Open the chart page →

11,554
pgadminstakaterVerified publisher0.1.141 of 1See more

pgadmin stakater 0.1.14

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.5a5a656e1d5fd
setuptools@40.8.0
70.0.0

Open the chart page →

2,060
restful-distributed-lock-managerstakaterVerified publisher1.0.41 of 1See more

restful-distributed-lock-manager stakater 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
setuptools@38.5.2
70.0.0

Open the chart page →

3,116
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
setuptools@65.5.1
70.0.0

Open the chart page →

20,223
horcruxstakewise1.0.11 of 1See more

horcrux stakewise 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
stakewiselabs/bls-horcrux:v1.0.02afd0c0b34cb
setuptools@52.0.0
70.0.0

Open the chart page →

1,421
cost-analyzerstatcan1.82.21 of 9See more

cost-analyzer statcan 1.82.2

1 of the 9 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.12.089739be9ff38
setuptools@56.0.0
70.0.0

Open the chart page →

16,506
datapusherstatcan1.0.01 of 1See more

datapusher statcan 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
keitaro/ckan-datapusher:0.0.175bf1a45f45c1
setuptools@50.3.0
70.0.0

Open the chart page →

3,044
prometheus-operatorstatcan0.2.21 of 7See more

prometheus-operator statcan 0.2.2

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.1517b98eecdf6d1
setuptools@46.1.3
70.0.0

Open the chart page →

12,237
storageclass-routerstorageclass-routerVerified publisher0.4.11 of 1See more

storageclass-router storageclass-router 0.4.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/maxiv/storageclass-router:0.4.160725dab588c
setuptools@69.0.3
70.0.0

Open the chart page →

1,058
sn-platform-slimstreamnative1.11.441 of 6See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
python-pip@20.0.2-5ubuntu1.10
setuptools@45.2.0-1ubuntu0.1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

10,134
studygovernorstudy-governorVerified publisher0.1.381 of 3See more

studygovernor study-governor 0.1.38

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
setuptools@69.0.2
70.0.0

Open the chart page →

1,447
artifactory-cleanupsubshellVerified publisher1.0.11 of 1See more

artifactory-cleanup subshell 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
devopshq/artifactory-cleanup:1.0.1830e093bffa91
setuptools@58.1.0
70.0.0

Open the chart page →

2,534
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
setuptools@65.5.1
70.0.0

Open the chart page →

13,390
surogate-hubsurogate-hubVerified publisher2.1.51 of 1See more

surogate-hub surogate-hub 2.1.5

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
setuptools@66.1.1
70.0.0

Open the chart page →

3,460
netforge-besvtechVerified publisher0.0.21 of 3See more

netforge-be svtech 0.0.2

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
mher/flower:2.051c3c3db5be3
setuptools@65.5.1
70.0.0

Open the chart page →

4,674

Container images carrying it

1,047 by charts deploying them

A fixed version is listed for 17 of the 17 affected packages.

Container imageDigestPackageFixed inUsed by
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
confluentinc/cp-kafka:5.4.01bbda887bc53
setuptools@44.0.0
70.0.0
1
confluentinc/cp-kafka:7.1.2.amd643bf359d5e340
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-7.el8_6.1
70.0.0
1
confluentinc/cp-kafka:7.6.683dbca3efd2a
setuptools@39.2.0
70.0.0
1
confluentinc/cp-kafka:7.8.0-3-ubi8adc392d28a1e
setuptools@39.2.0
70.0.0
1
confluentinc/cp-kafka:7.4.4c0224a1adf7a
python-setuptools@39.2.0-7.el8
setuptools@67.8.0
0:39.2.0-8.el8_10
70.0.0
1
confluentinc/cp-kafka:5.0.1c87b1c07fb53
setuptools@40.5.0
70.0.0
1
confluentinc/cp-kafka:7.5.1dc9b972db002
python-setuptools@39.2.0-7.el8
python39@3.9.16-1.module+el8.8.0+18968+3d7b19f0.1
python3x-setuptools@50.3.2-4.module+el8.5.0+12204+54860423
setuptools@39.2.0
0:39.2.0-7.el8_8.1
0:3.9.16-1.module+el8.8.0+20025+f2100191.2
0:50.3.2-6.module+el8.8.0+22158+89b6fb7b
70.0.0
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
python-setuptools@39.2.0-6.el8
setuptools@53.0.0
0:39.2.0-8.el8_10
70.0.0
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
python-setuptools@39.2.0-6.el8
setuptools@53.0.0
0:39.2.0-8.el8_10
70.0.0
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
python-setuptools@39.2.0-6.el8
setuptools@53.0.0
0:39.2.0-8.el8_10
70.0.0
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
python-setuptools@39.2.0-6.el8
setuptools@53.0.0
0:39.2.0-8.el8_10
70.0.0
1
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
python-setuptools@39.2.0-7.el8
python39@3.9.16-1.module+el8.8.0+18968+3d7b19f0.1
python3x-setuptools@50.3.2-4.module+el8.5.0+12204+54860423
setuptools@67.8.0
0:39.2.0-7.el8_8.1
0:3.9.16-1.module+el8.8.0+20025+f2100191.2
0:50.3.2-6.module+el8.8.0+22158+89b6fb7b
70.0.0
1
confluentinc/cp-zookeeper:7.8.0-3-ubi85ca5f3269814
setuptools@39.2.0
70.0.0
1
confluentinc/cp-zookeeper:6.1.078c190f4472c
python-setuptools@39.2.0-6.el8
setuptools@53.0.0
0:39.2.0-8.el8_10
70.0.0
1
countly/api:25.05.4f4cc7447c4f5
setuptools@56.0.0
70.0.0
1
countly/countly-server:25.05.4e3c238248f99
setuptools@45.2.0-1
45.2.0-1ubuntu0.2
1
countly/frontend:25.05.42acbc11499b6
setuptools@56.0.0
70.0.0
1
craigwillis/c2metadata-bd:latestae317d7e4724
setuptools@50.3.0
70.0.0
1
crazymax/rtorrent-rutorrent:3.10-0.9.8-0.13.8fb307f5b87bf
py3-setuptools@65.6.0-r0
setuptools@65.6.0
70.3.0-r0
70.0.0
1
ctron/hawkbit-operator:0.1.48fdea8f76499
python-setuptools@39.2.0-5.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
danuk/telegram-sender:0.0.1026560388070
setuptools@58.1.0
70.0.0
1
daskdev/dask:1.1.04ecd7bc35500
setuptools@40.2.0
70.0.0
1
daskdev/dask-notebook:1.1.0052630f5ca04
setuptools@40.6.3
70.0.0
1
datadog/agent:7.22.08f20e56b5311
setuptools@47.1.0
70.0.0
1
datamate/seafile-professional:11.0.202dd66b722464
setuptools@59.6.0
70.0.0
1
datawire/aes:2.0.3-ea07f8fe4f4f8e
setuptools@50.3.2
70.0.0
1
datawire/aes:1.13.62beb65062c8b
setuptools@50.3.2
70.0.0
1
datawire/aes:3.11.195ec30b3c732
setuptools@69.5.1
70.0.0
1
datawire/emissary:2.0.2-ea9716efbdd24b
setuptools@50.3.2
70.0.0
1
dbanda/livy:0.80ca125e68e53
setuptools@47.3.1
70.0.0
1
dbanda/spark:2.4.6d0e6367876ae
setuptools@47.3.1
70.0.0
1
dchesterton/amcrest2mqtt:1.0.9cc70f2238aa9
setuptools@57.4.0
70.0.0
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
setuptools@69.1.1
70.0.0
1
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
setuptools@69.5.1
70.0.0
1
ddosify/selfhosted_backend:3.2.93c11e3182652
setuptools@65.5.1
70.0.0
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
setuptools@65.5.1
70.0.0
1
ddosify/selfhosted_hammermanager:1.2.471b8768f49bc
setuptools@58.1.0
70.0.0
1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
setuptools@65.5.1
70.0.0
1
deconzcommunity/deconz:2.29.2062de2362641
setuptools@66.1.1
70.0.0
1
deconzcommunity/deconz:2.12.066541bbb78952
setuptools@40.8.0
70.0.0
1
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
setuptools@56.0.0
70.0.0
1
dellemc/csm-application-mobility-controller:v0.1.0148ada9060a9
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-7.el8_6.1
70.0.0
1
devopshq/artifactory-cleanup:1.0.1830e093bffa91
setuptools@58.1.0
70.0.0
1
devopstales/kubedash:3.1.08bb837da5aec
setuptools@65.5.1
70.0.0
1
devopstales/kube-openid-connector:1.042c40a0e9f1b
setuptools@57.5.0
70.0.0
1
devopstales/trivy-operator:2.575136aa7a26e
setuptools@57.5.0
70.0.0
1
dgtlmoon/sockpuppetbrowser:latestf166a963b550
setuptools@65.5.0
70.0.0
1
dinutac/jinja2docker:2.1.89340dde8a8a4
py3-setuptools@68.2.2-r0
setuptools@68.2.2
70.3.0-r0
70.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.