CVE-2024-6345

High

Advisory

Published 15 Jul 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.8; base score, highest
EPSS: 0.019; 79th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 978; of 17,781 indexed, latest versions
Container images: 1,039; deployed by those charts
Fix available: 17 of 17; affected packages

setuptools vulnerable to Command Injection via package URL

Carried by container images the latest versions of 978 of 17,781 indexed charts deploy, on 1,039 images.

Affected package	Affected versions	Fixed in	Images
setuptoolspypi	0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+103 more	70.0.0	989
python-setuptoolsrpm	0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+3 more	0:0.9.8-7.el7_9.1, 0:39.2.0-6.el8_4.1, 0:39.2.0-7.el8_6.1, 0:39.2.0-7.el8_8.1+3 more	115
setuptoolsdeb	45.2.0-1, 45.2.0-1ubuntu0.1, 59.6.0-1.2, 59.6.0-1.2ubuntu0.22.04.1+2 more	45.2.0-1ubuntu0.2, 59.6.0-1.2ubuntu0.22.04.2, 66.1.1-1+deb12u1, 68.1.2-2ubuntu1.1	101
python-pipdeb	1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+11 more	1.5.4-1ubuntu4+esm5, 8.1.1-2ubuntu0.6+esm8, 9.0.1-2.3~ubuntu1.18.04.8+esm4, 20.0.2-5ubuntu1.10+esm2	60
python-setuptoolsdeb	3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more	3.3-1ubuntu2+esm2, 20.7.0-1ubuntu0.1~esm2, 39.0.1-2ubuntu0.1+esm1, 44.0.0-2ubuntu0.1+esm1	39
py3-setuptoolsapk	65.6.0-r0, 67.7.2-r0, 68.2.2-r0, 69.5.1-r0	70.3.0-r0	21
python-chardetrpm	3.0.4-7.el8	0:3.0.4-19.module+el8.4.0+9822+20bf1249	20
python-idnarpm	2.5-5.el8	0:2.10-3.module+el8.4.0+9822+20bf1249	20
python-pysocksrpm	1.6.8-3.el8	0:1.7.1-4.module+el8.4.0+9822+20bf1249	20
python-requestsrpm	2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8	0:2.25.0-2.module+el8.4.0+9822+20bf1249	20
python-urllib3rpm	1.24.2-5.el8, 1.24.2-5.el8_6.1	0:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1	20
python3x-setuptoolsrpm	41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+54860423	0:50.3.2-3.module+el8.4.0+22168+8a561f05.2, 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b	9
python-plyrpm	3.9-9.el8	0:3.11-10.module+el8.4.0+9822+20bf1249	7
python39rpm	3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.1	0:3.9.2-2.module+el8.4.0+20027+45e0e702.2, 0:3.9.16-1.module+el8.8.0+20025+f2100191.2	6
python3x-piprpm	19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf1249	0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c488	4
python3.11-setuptoolsrpm	65.5.1-2.el9	0:65.5.1-2.el9_4.1	1
python-wheelrpm	0.33.6-5.module+el8.4.0+8888+89bc7e79	1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1	1

OSV records: ALPINE-CVE-2024-6345 DEBIAN-CVE-2024-6345 GHSA-cx63-2mw6-8hw5 RHSA-2024:5000 RHSA-2024:5040 RHSA-2024:5078 RHSA-2024:5084 RHSA-2024:5137 RHSA-2024:5279 RHSA-2024:5530 RHSA-2024:5534 RHSA-2024:6220 RHSA-2024:6488 RHSA-2024:6662 UBUNTU-CVE-2024-6345 RLSA-2024:5530
Also known as: BIT-setuptools-2024-6345, PYSEC-2026-1918, RHSA-2024:6907, USN-7002-1

Charts affected

978 by stars

Chart

Latest

Affected images

Radar Score

fadicetic

0.3.1

4 of 25 See more

fadi cetic 0.3.1

4 of the 25 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
amancevice/superset :0.35.2	12a0a9e66550	setuptools@44.0.0	70.0.0
ceticasbl/pg-ldap-sync :latest	6c0aa7567145	setuptools@40.8.0	70.0.0
jupyterhub/k8s-hub :0.11.1	b6b4a1a34bf0	python-pip@20.0.2-5ubuntu1.1 setuptools@45.2.0-1 setuptools@51.1.2	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0
jupyterhub/k8s-singleuser-sample :0.11.1	e3e6f3051df8	setuptools@49.6.0.post20201009	70.0.0

Open the chart page →

52,919

daskhubdask

2024.1.1

3 of 9 See more

daskhub dask 2024.1.1

3 of the 9 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
pangeo/base-notebook :2024.01.15	5fbe688a4f80	setuptools@69.0.3	70.0.0
ghcr.io/dask/dask-gateway-server :2024.1.0	881e7acfc5a0	setuptools@65.5.1	70.0.0
quay.io/jupyterhub/k8s-hub :3.2.1	2528c6e57587	setuptools@65.5.1	70.0.0

Open the chart page →

14,094

seafiledatamate

0.6.0

1 of 6 See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
datamate/seafile-professional :11.0.20	2dd66b722464	setuptools@59.6.0	70.0.0

Open the chart page →

27,267

geonode-k8sgeonode-k8s

2.0.0

2 of 10 See more

geonode-k8s geonode-k8s 2.0.0

2 of the 10 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
geonode/geoserver :2.28.4-latest	81b1d431b7e9	setuptools@59.6.0	70.0.0
geopython/pycsw :3.0.0-beta2	84662ea6b78b	setuptools@66.1.1	70.0.0

Open the chart page →

13,953

karakeephelmforge

1.2.9

1 of 3 See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/browserless/chromium :v2.55.4	2ed0183564d7	setuptools@68.1.2	70.0.0

Open the chart page →

9,460

netbird-dashboardjaconi

1.2.1

1 of 1 See more

netbird-dashboard jaconi 1.2.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
netbirdio/dashboard :v2.90.2	332cc31f5f35	setuptools@52.0.0	70.0.0

Open the chart page →

585

keycloak-operatorkeycloak-operator

0.0.4

1 of 1 See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :20.0.2	b1710745fa64	python-setuptools@39.2.0-6.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0

Open the chart page →

4,652

percona-xtradb-clusterkfirfer

1.5.10

1 of 3 See more

percona-xtradb-cluster kfirfer 1.5.10

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
kfirfer/percona-xtradb-healthcheck :0.0.1	ef7b909a8e6b	setuptools@50.3.2	70.0.0

Open the chart page →

4,957

kubeflowkubeflow

1.6.2

6 of 45 See more

kubeflow kubeflow 1.6.2

6 of the 45 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
kserve/models-web-app :v0.8.0	63ea05e73842	setuptools@57.5.0	70.0.0
kubeflownotebookswg/jupyter-web-app :v1.6.1	d762690e21c1	setuptools@57.5.0	70.0.0
kubeflownotebookswg/tensorboards-web-app :v1.6.1	0876fef1973b	setuptools@57.5.0	70.0.0
kubeflownotebookswg/volumes-web-app :v1.6.1	7299fa94db15	setuptools@57.5.0	70.0.0
library/python :3.7	eedf63967cdb	setuptools@57.5.0	70.0.0
gcr.io/ml-pipeline/metadata-writer :2.0.0-alpha.5	ec3ae9f6df47	setuptools@57.5.0	70.0.0

Open the chart page →

96,941

pypiserverowkin

3.1.1

1 of 1 See more

pypiserver owkin 3.1.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
pypiserver/pypiserver :v1.3.2	303ac89b2aa2	setuptools@44.0.0	70.0.0

Open the chart page →

506

clustersecretpatrungel

0.2.0

1 of 1 See more

clustersecret patrungel 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
flag5/clustersecret :0.0.9	4ad5748bfcc6	setuptools@57.5.0	70.0.0

Open the chart page →

1,841

taigarc-helm-charts

0.1.0

2 of 7 See more

taiga rc-helm-charts 0.1.0

2 of the 7 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
taigaio/taiga-back :6.4.2	9f97323cc150	setuptools@57.5.0	70.0.0
taigaio/taiga-protected :6.4.0	36318831b3e7	setuptools@47.1.0	70.0.0

Open the chart page →

7,255

openspeedtestspeedtest

0.1.2

1 of 1 See more

openspeedtest speedtest 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
openspeedtest/latest :v2.0.0	d4d62f4b7d85	py3-setuptools@65.6.0-r0 setuptools@65.6.0	70.3.0-r0 70.0.0

Open the chart page →

2,040

netboxstartechnica

5.1.0

1 of 4 See more

netbox startechnica 5.1.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
netboxcommunity/netbox :v3.7.8-2.8.0	9bf83b350a89	setuptools@69.5.1	70.0.0

Open the chart page →

1,650

k8s-telegram-sendertelegram-sender

0.0.1

1 of 1 See more

k8s-telegram-sender telegram-sender 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
danuk/telegram-sender :0.0.1	026560388070	setuptools@58.1.0	70.0.0

Open the chart page →

3,048

grafana-pdf-exporterwiremind

2.1.1

1 of 1 See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	setuptools@66.1.1-1	66.1.1-1+deb12u1

Open the chart page →

9,746

alerta-webalerta-web

0.1.12

1 of 2 See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
hayk96/alerta-web :9.0.4	86377705e9e3	setuptools@58.1.0	70.0.0

Open the chart page →

3,569

aws-ecr-credentialarchitectminds

1.4.2

1 of 1 See more

aws-ecr-credential architectminds 1.4.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
architectminds/aws-kubectl :1.1	9735e59a1085	setuptools@41.0.1	70.0.0

Open the chart page →

1,437

openshift-consoleav1o-charts

0.3.6

1 of 1 See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	python-setuptools@39.2.0-5.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0

Open the chart page →

9,052

backup-zenbzen

0.1.4

1 of 1 See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
rezachalak/bzen-mongo :1.0.0	34f694325191	python-pip@20.0.2-5ubuntu1.9 setuptools@45.2.0-1ubuntu0.1 setuptools@45.2.0	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0

Open the chart page →

7,960

cmak-operatorcmak-operator

2.2.2

1 of 3 See more

cmak-operator cmak-operator 2.2.2

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/eshepelyuk/dckr/cmak2zk :1.2.0	22de6314c31e	setuptools@57.5.0	70.0.0

Open the chart page →

4,605

coder-observabilitycoder-observability

0.7.3

1 of 21 See more

coder-observability coder-observability 0.7.3

1 of the 21 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
kiwigrid/k8s-sidecar :1.24.3	5af76eebbba7	setuptools@65.5.1	70.0.0

Open the chart page →

24,700

codetogethercodetogether

1.4.25

1 of 1 See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
codetogether/codetogether :latest	4348c8a38752	python-setuptools@53.0.0-12.el9	0:53.0.0-12.el9_4.1

Open the chart page →

7,450

convertigoconvertigo

8.4.3

1 of 5 See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
baserow/baserow :1.30.1	df0c42eb67e8	setuptools@66.1.1-1 setuptools@66.1.1	66.1.1-1+deb12u1 70.0.0

Open the chart page →

17,404

cachetdeliveryhero

1.3.5

1 of 2 See more

cachet deliveryhero 1.3.5

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
cachethq/docker :2.3.15	a61ff0f67ea7	setuptools@33.1.1.post20171031	70.0.0

Open the chart page →

1,896

zabbix-kubernetes-discoverydjerfy

1.4.20

1 of 1 See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery :v1.4.20	7a50c07e7c69	setuptools@68.1.2	70.0.0

Open the chart page →

4,147

ecr-proxyevryfs-oss

0.2.9

1 of 1 See more

ecr-proxy evryfs-oss 0.2.9

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
esailors/aws-ecr-http-proxy :1.5.1	5608ae045fa7	setuptools@52.0.0	70.0.0

Open the chart page →

1,523

openshift-secured-appeximiait

0.5.0

1 of 1 See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:3.11-10.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-7.el8_6.1 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 70.0.0

Open the chart page →

12,042

openshift-secured-pgadmineximiait

0.2.0

2 of 2 See more

openshift-secured-pgadmin eximiait 0.2.0

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
dpage/pgadmin4 :7.5	37946e4f3e7b	py3-setuptools@67.7.2-r0 setuptools@67.7.2	70.3.0-r0 70.0.0
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:3.11-10.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-7.el8_6.1 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 70.0.0

Open the chart page →

14,546

openshift-secured-redisInsighteximiait

0.9.2

2 of 2 See more

openshift-secured-redisInsight eximiait 0.9.2

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
redislabs/redisinsight :1.14.0	b03ab1426d0d	setuptools@63.2.0	70.0.0
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:3.11-10.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-7.el8_6.1 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 70.0.0

Open the chart page →

13,874

deconzgeek-cookbook

6.5.2

1 of 1 See more

deconz geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
deconzcommunity/deconz :2.12.06	6541bbb78952	setuptools@40.8.0	70.0.0

Open the chart page →

3,555

esphomegeek-cookbook

8.4.2

1 of 1 See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
esphome/esphome :1.18.0	3f51ec10e823	setuptools@40.8.0	70.0.0

Open the chart page →

3,717

frigategeek-cookbook

8.2.2

1 of 1 See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	python-pip@20.0.2-5ubuntu1.6 setuptools@45.2.0-1 setuptools@45.2.0	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0

Open the chart page →

10,598

mealiegeek-cookbook

5.1.2

1 of 2 See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
hkotel/mealie :api-v1.0.0beta-2	a7e6b6abe087	setuptools@58.1.0	70.0.0

Open the chart page →

7,579

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	setuptools@45.2.0-1	45.2.0-1ubuntu0.2

Open the chart page →

10,154

tautulligeek-cookbook

11.4.2

1 of 1 See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	setuptools@45.2.0-1 setuptools@45.2.0	45.2.0-1ubuntu0.2 70.0.0

Open the chart page →

10,628

mlflowgetindata

0.1.2

1 of 1 See more

mlflow getindata 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
gcr.io/getindata-images-public/mlflow :latest	25d6975951f1	setuptools@65.5.1	70.0.0

Open the chart page →

2,452

nzbhydra2halkeye

2.30.1

1 of 2 See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
binhex/arch-nzbhydra2 :3.1.0-1-01	fb8952921ab6	setuptools@49.6.0	70.0.0

Open the chart page →

6,711

netbirdhelmforge

1.0.10

1 of 4 See more

netbird helmforge 1.0.10

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
netbirdio/dashboard :v2.90.10	1b59e1c905c9	setuptools@52.0.0	70.0.0

Open the chart page →

2,962

cratedbhmdmph

2.0.3

1 of 2 See more

cratedb hmdmph 2.0.3

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
library/crate :4.7.0	c7984a05e15b	setuptools@39.2.0	70.0.0

Open the chart page →

1,335

redis-pod-labelerhmdmph

1.0.2

1 of 1 See more

redis-pod-labeler hmdmph 1.0.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
hmdmph/redis-pod-labeler :1.0.0-alpine	7f1381fe0f3b	setuptools@47.1.1	70.0.0

Open the chart page →

2,985

mysql-clusterkfirfer

0.0.4

1 of 1 See more

mysql-cluster kfirfer 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
mysql/mysql-cluster :8.0.20	e4ea36622cdd	setuptools@40.8.0	70.0.0

Open the chart page →

416

kiali-operatorkiali

2.31.0

1 of 1 See more

kiali-operator kiali 2.31.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/kiali/kiali-operator :v2.31.0	f837d8f25545	setuptools@53.0.0	70.0.0

Open the chart page →

1,157

kubeviouskubevious

1.2.2

1 of 7 See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
redislabs/redisearch :2.4.14	33561794c5c8	setuptools@63.4.2	70.0.0

Open the chart page →

14,204

kubeservice-lxcfs-webhookkubservice-charts

1.6.0

1 of 6 See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
dongjiang1989/lxcfs :v6.0.3	4bf9ae391948	setuptools@45.2.0	70.0.0

Open the chart page →

11,582

memgraph-high-availabilitymemgraph

1.4.0

1 of 2 See more

memgraph-high-availability memgraph 1.4.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
memgraph/memgraph :3.13.0	a1dc375774ed	setuptools@68.1.2	70.0.0

Open the chart page →

1,373

flagsmithone-acre-fund

0.1.5

2 of 6 See more

flagsmith one-acre-fund 0.1.5

2 of the 6 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
blacktop/httpie :latest	fc5e68e2f5ab	setuptools@40.6.2	70.0.0
flagsmith/flagsmith-api :v2.6.0	fd58556339a4	setuptools@54.2.0	70.0.0

Open the chart page →

6,868

kobotoolboxone-acre-fund

0.7.4

2 of 9 See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
kobotoolbox/kobocat :2.022.24a	b15679454415	setuptools@63.2.0	70.0.0
kobotoolbox/kpi :2.022.24d	bcacc01bccd4	setuptools@63.2.0	70.0.0

Open the chart page →

18,517

open-zaakopen-zaak

0.8.0

1 of 3 See more

open-zaak open-zaak 0.8.0

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
openzaak/open-zaak :1.6.0	2ca2ea6e0ae9	setuptools@58.5.3	70.0.0

Open the chart page →

4,045

oesopsmx

4.0.32

8 of 25 See more

oes opsmx 4.0.32

8 of the 25 container images this version deploys carry CVE-2024-6345.

Container image	Digest	Package	Fixed in
quay.io/opsmxpublic/awsgit :v2-openssh	0d21ba756f44	setuptools@52.0.0	70.0.0
quay.io/opsmxpublic/awsgit :v3-js	15a6faada3d4	setuptools@52.0.0	70.0.0
quay.io/opsmxpublic/ubi8-gate :isd-spin-2025.10.01-5c720954-202511260810	2b3554029737	setuptools@39.2.0	70.0.0
quay.io/opsmxpublic/ubi8-oes-audit-client :isd-spin-2025.10.01-cb1bfce-202511261037	32a5b1887eab	setuptools@39.2.0	70.0.0
quay.io/opsmxpublic/ubi8-oes-autopilot :isd-spin-2025.10.01-af26a30d4-202511261054	58bd0bcf72f9	setuptools@39.2.0	70.0.0
quay.io/opsmxpublic/ubi8-oes-db :v3.0.0	89ee6493af89	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-6.el8 python-urllib3@1.24.2-5.el8 setuptools@39.2.0	0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-6.el8_4.1 0:1.25.10-3.module+el8.4.0+9822+20bf1249 70.0.0
quay.io/opsmxpublic/ubi8-oes-platform :isd-spin-2025.10.01-a7c191ec-202511261122	8ed603ab7417	setuptools@39.2.0	70.0.0
quay.io/opsmxpublic/ubi8-oes-ui :isd-spin-2025.10.01-e6f6f01-202512100640	5d934bb66884	setuptools@39.2.0	70.0.0

Open the chart page →

107,811

Container images carrying it

1,039 by charts deploying them

A fixed version is listed for 17 of the 17 affected packages.

Container image	Digest	Package	Fixed in	Used by
gabibbo97/389ds :fedora-32	c047ea64e8cb	setuptools@41.6.0	70.0.0	1
galaxy/cloudman-server :latest	e5c265fe9fcd	python-pip@20.0.2-5ubuntu1.6 setuptools@45.2.0-1 setuptools@45.2.0	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0	1
galaxy/galaxy-init :v18.01	0267bad550e6	python-pip@1.5.4-1ubuntu4 python-setuptools@3.3-1ubuntu2 setuptools@36.5.0.post20170921	1.5.4-1ubuntu4+esm5 3.3-1ubuntu2+esm2 70.0.0	1
galaxy/galaxy-stable :v18.01	8e577a626dfd	python-pip@1.5.4-1ubuntu4 python-setuptools@3.3-1ubuntu2 setuptools@39.2.0	1.5.4-1ubuntu4+esm5 3.3-1ubuntu2+esm2 70.0.0	1
galaxy/pulsar-kubernetes :0.15.7	e50a890e24c9	setuptools@66.1.1	70.0.0	1
genseb/rabbitmq-producer-randomizer :0.0.6	cb7599641099	py3-setuptools@67.7.2-r0 setuptools@67.7.2	70.3.0-r0 70.0.0	1
geonode/geoserver :2.28.4-latest	81b1d431b7e9	setuptools@59.6.0	70.0.0	1
geopython/pycsw :3.0.0-beta2	84662ea6b78b	setuptools@66.1.1	70.0.0	1
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	python-pip@9.0.1-2.3~ubuntu1.18.04.2 setuptools@50.3.0	9.0.1-2.3~ubuntu1.18.04.8+esm4 70.0.0	1
gethue/hue :4.11.0	11b649636e68	python-pip@20.0.2-5ubuntu1.6 setuptools@45.2.0-1 setuptools@65.3.0	20.0.2-5ubuntu1.10+esm2 45.2.0-1ubuntu0.2 70.0.0	1
gethue/hue :4.10.0	5702b2c37ff9	python-pip@9.0.1-2.3~ubuntu1.18.04.5 python-setuptools@39.0.1-2 setuptools@39.0.1	9.0.1-2.3~ubuntu1.18.04.8+esm4 39.0.1-2ubuntu0.1+esm1 70.0.0	1
gethue/hue :latest	7d5c1b9f8a79	setuptools@68.1.2	70.0.0	1
getsentry/sentry-kubernetes :latest	6ac37974fd2a	setuptools@40.8.0	70.0.0	1
gluufederation/opendj :4.3.0_01	1a1128b28b95	setuptools@52.0.0	70.0.0	1
gmaas2/github-api :latest	148fc2d9afe9	setuptools@65.5.1	70.0.0	1
gmelillo/registry :0.1.8	c599d608a2f7	setuptools@52.0.0	70.0.0	1
gomods/athens :v0.8.1	d714c7ff0231	setuptools@41.2.0	70.0.0	1
gomods/athens :v0.11.0	efb811df7844	setuptools@41.2.0	70.0.0	1
goofball222/pritunl :1.30.3070.59	43c0743701d4	setuptools@52.0.0	70.0.0	1
goofball222/pritunl :1.32.3602.80	7bf26032dfce	setuptools@59.4.0	70.0.0	1
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	setuptools@49.2.0	70.0.0	1
greenbirdit/locust :0.9.0	e99d53bdc944	setuptools@40.6.3	70.0.0	1
gristlabs/grist :0.7.9	6e71b1914a7e	setuptools@40.8.0	70.0.0	1
guillh/web3-prometheus-exporter :0.3.0	4fb99dbc32b2	setuptools@65.5.1	70.0.0	1
gurolakman/oam :4.0.0	ed8fd2062548	setuptools@39.2.0	70.0.0	1
gurolakman/smsf-configuration :1.0.4	9abb3882bcbd	python-setuptools@39.2.0-7.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0	1
gurolakman/smsf-dispatcher :1.0.4	6537e8ed8de8	python-setuptools@39.2.0-7.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0	1
gurolakman/smsf-momt :1.0.4	ce23b20a8a17	python-setuptools@39.2.0-7.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0	1
gurolakman/smsf-registration :1.0.4	b22e746edd5d	python-setuptools@39.2.0-7.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0	1
gurolakman/ussigw-configuration :1.0.4	bf18525c5ad9	python-setuptools@39.2.0-7.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0	1
gurolakman/ussigw-core :1.0.4	8739565c3ea2	python-setuptools@39.2.0-7.el8 setuptools@39.2.0	0:39.2.0-8.el8_10 70.0.0	1
ha33ona/python :test	6affdfc644d0	setuptools@57.5.0	70.0.0	1
halkeye/slack-resurrect :v0.1.4	77b05e95fdb5	setuptools@41.0.1	70.0.0	1
hamidyousefi93/saam-test :latest	c34f071f6ed0	setuptools@68.2.2	70.0.0	1
hammerspaceinc/csi-plugin :v1.2.8-rc2	395bee4504fc	setuptools@53.0.0	70.0.0	1
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	setuptools@58.1.0	70.0.0	1
hamzaarshad10/querypodpy :1.7	154f38e8668e	setuptools@65.5.1	70.0.0	1
haveagitgat/tdarr :2.00.18	1256348872ce	python-setuptools@44.0.0-2 setuptools@45.2.0-1	44.0.0-2ubuntu0.1+esm1 45.2.0-1ubuntu0.2	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	setuptools@45.2.0-1	45.2.0-1ubuntu0.2	1
haveagitgat/tdarr_node :2.17.01	3ff0913202dd	python-setuptools@44.0.0-2ubuntu0.1 setuptools@45.2.0-1ubuntu0.1	44.0.0-2ubuntu0.1+esm1 45.2.0-1ubuntu0.2	1
hayk96/alerta-web :9.0.4	86377705e9e3	setuptools@58.1.0	70.0.0	1
hazelcast/management-center :5.3.2	f9d34300d330	python-setuptools@39.2.0-7.el8 setuptools@39.2.0	0:39.2.0-7.el8_8.1 70.0.0	1
hcguersoy/cleanreg :v0.8.0	63b76fdcfbe1	setuptools@58.1.0	70.0.0	1
healthchecks/healthchecks :v2.8.1	e82bb0836e30	setuptools@65.5.1	70.0.0	1
helga09/my_sql_shoes :v1.1.1	a03657d97897	setuptools@50.3.2	70.0.0	1
helicone/clickhouse-migration-runner :v2025.03.05-1	4c69b971a7e4	setuptools@45.2.0	70.0.0	1
hhyo/archery :v1.9.1	1aa41843419e	setuptools@62.6.0	70.0.0	1
hiboxsystems/marge-bot :0.11.0	7235809b43b3	setuptools@65.5.0	70.0.0	1
hiboxsystems/marge-bot :0.12.1	a96c10b61a59	setuptools@65.5.0	70.0.0	1
hiboxsystems/marge-bot :0.14.0	dcffb926e563	setuptools@65.5.1	70.0.0	1