StackRadar

CVE-2024-6345

High

Advisory

Published 15 Jul 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.019
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
978
of 17,781 indexed, latest versions
Container images
1,039
deployed by those charts
Fix available
17 of 17
affected packages

setuptools vulnerable to Command Injection via package URL

Carried by container images the latest versions of 978 of 17,781 indexed charts deploy, on 1,039 images.

Affected packageAffected versionsFixed inImages
setuptoolspypi0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+103 more70.0.0989
python-setuptoolsrpm0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+3 more0:0.9.8-7.el7_9.1, 0:39.2.0-6.el8_4.1, 0:39.2.0-7.el8_6.1, 0:39.2.0-7.el8_8.1+3 more115
setuptoolsdeb45.2.0-1, 45.2.0-1ubuntu0.1, 59.6.0-1.2, 59.6.0-1.2ubuntu0.22.04.1+2 more45.2.0-1ubuntu0.2, 59.6.0-1.2ubuntu0.22.04.2, 66.1.1-1+deb12u1, 68.1.2-2ubuntu1.1101
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+11 more1.5.4-1ubuntu4+esm5, 8.1.1-2ubuntu0.6+esm8, 9.0.1-2.3~ubuntu1.18.04.8+esm4, 20.0.2-5ubuntu1.10+esm260
python-setuptoolsdeb3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more3.3-1ubuntu2+esm2, 20.7.0-1ubuntu0.1~esm2, 39.0.1-2ubuntu0.1+esm1, 44.0.0-2ubuntu0.1+esm139
py3-setuptoolsapk65.6.0-r0, 67.7.2-r0, 68.2.2-r0, 69.5.1-r070.3.0-r021
python-chardetrpm3.0.4-7.el80:3.0.4-19.module+el8.4.0+9822+20bf124920
python-idnarpm2.5-5.el80:2.10-3.module+el8.4.0+9822+20bf124920
python-pysocksrpm1.6.8-3.el80:1.7.1-4.module+el8.4.0+9822+20bf124920
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_80:2.25.0-2.module+el8.4.0+9822+20bf124920
python-urllib3rpm1.24.2-5.el8, 1.24.2-5.el8_6.10:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be120
python3x-setuptoolsrpm41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+548604230:50.3.2-3.module+el8.4.0+22168+8a561f05.2, 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b9
python-plyrpm3.9-9.el80:3.11-10.module+el8.4.0+9822+20bf12497
python39rpm3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.10:3.9.2-2.module+el8.4.0+20027+45e0e702.2, 0:3.9.16-1.module+el8.8.0+20025+f2100191.26
python3x-piprpm19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf12490:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c4884
python3.11-setuptoolsrpm65.5.1-2.el90:65.5.1-2.el9_4.11
python-wheelrpm0.33.6-5.module+el8.4.0+8888+89bc7e791:0.35.1-3.module+el8.4.0+15042+dc5a279b.11
OSV records
ALPINE-CVE-2024-6345DEBIAN-CVE-2024-6345GHSA-cx63-2mw6-8hw5RHSA-2024:5000RHSA-2024:5040RHSA-2024:5078RHSA-2024:5084RHSA-2024:5137RHSA-2024:5279RHSA-2024:5530RHSA-2024:5534RHSA-2024:6220RHSA-2024:6488RHSA-2024:6662UBUNTU-CVE-2024-6345RLSA-2024:5530
Also known as
BIT-setuptools-2024-6345, PYSEC-2026-1918, RHSA-2024:6907, USN-7002-1

Charts affected

978 by stars
ChartLatestAffected imagesRadar Score
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

11,592
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

16,069
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
python-pip@1.5.4-1ubuntu4
python-setuptools@3.3-1ubuntu2
setuptools@36.5.0.post20170921
1.5.4-1ubuntu4+esm5
3.3-1ubuntu2+esm2
70.0.0
galaxy/galaxy-stable:v18.018e577a626dfd
python-pip@1.5.4-1ubuntu4
python-setuptools@3.3-1ubuntu2
setuptools@39.2.0
1.5.4-1ubuntu4+esm5
3.3-1ubuntu2+esm2
70.0.0

Open the chart page →

70,895
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
cloudve/janis-terminal:latestaf56e77ca587
python-pip@9.0.1-2.3~ubuntu1.18.04.1
python-setuptools@39.0.1-2
setuptools@39.0.1
9.0.1-2.3~ubuntu1.18.04.8+esm4
39.0.1-2ubuntu0.1+esm1
70.0.0

Open the chart page →

14,270
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
setuptools@66.1.1
70.0.0

Open the chart page →

6,162
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
setuptools@46.4.0.post20200518
70.0.0

Open the chart page →

13,156
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
setuptools@65.5.1
70.0.0

Open the chart page →

8,009
clamapicnieg2.0.51 of 2See more

clamapi cnieg 2.0.5

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/mailu/clamav:1.9.5001d30483e4a8
py3-setuptools@65.6.0-r0
setuptools@65.6.0
70.3.0-r0
70.0.0

Open the chart page →

4,671
pulsarcnieg1.0.82 of 2See more

pulsar cnieg 1.0.8

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
setuptools@40.8.0
70.0.0
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
setuptools@40.6.3.post20190116
70.0.0

Open the chart page →

16,860
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
setuptools@68.1.2
70.0.0

Open the chart page →

13,220
web3-prometheus-exportercoinpri-helm-chartsVerified publisher0.1.31 of 1See more

web3-prometheus-exporter coinpri-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
setuptools@65.5.1
70.0.0

Open the chart page →

3,378
sumoconsensys0.4.1451 of 4See more

sumo consensys 0.4.145

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.1.2.amd643bf359d5e340
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-7.el8_6.1
70.0.0

Open the chart page →

5,958
kfservingcowboysysopVerified publisher1.3.11 of 3See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
kfserving/models-web-app:v0.6.1f322d6ffdfa3
setuptools@57.4.0
70.0.0

Open the chart page →

3,830
cp-helm-chartscp-helm-charts0.6.17 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

7 of the 8 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
python-setuptools@39.2.0-6.el8
setuptools@53.0.0
0:39.2.0-8.el8_10
70.0.0
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
python-setuptools@39.2.0-6.el8
setuptools@53.0.0
0:39.2.0-8.el8_10
70.0.0
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
python-setuptools@39.2.0-6.el8
setuptools@53.0.0
0:39.2.0-8.el8_10
70.0.0
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
python-setuptools@39.2.0-6.el8
setuptools@53.0.0
0:39.2.0-8.el8_10
70.0.0
confluentinc/cp-zookeeper:6.1.078c190f4472c
python-setuptools@39.2.0-6.el8
setuptools@53.0.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

58,857
couchpotatocronce0.0.11 of 1See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
setuptools@40.7.2
70.0.0

Open the chart page →

3,871
yadmscronce0.3.02 of 2See more

yadms cronce 0.3.0

2 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
mcronce/yadms-ftp:latestf820ef2e3c26
setuptools@41.6.0
70.0.0
mcronce/yadms-web:latestc03c1c7f5aa9
setuptools@41.6.0
70.0.0

Open the chart page →

2,500
wopiservercs3orgOfficialVerified publisher0.9.21 of 1See more

wopiserver cs3org 0.9.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
setuptools@67.4.0
70.0.0

Open the chart page →

2,348
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
opencsghq/csgship-agentic:v0.4.02cd29671a03e
setuptools@65.5.1
70.0.0

Open the chart page →

11,335
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
setuptools@66.1.1-1
66.1.1-1+deb12u1

Open the chart page →

15,380
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.4.121994f40e0da
setuptools@65.5.1
70.0.0

Open the chart page →

13,852
custom-rhcl-consolecustom-rhcl-consoleVerified publisher0.1.21 of 3See more

custom-rhcl-console custom-rhcl-console 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/custom-rhcl-console:v0.1.270bb0cabd653
setuptools@53.0.0
70.0.0

Open the chart page →

1,885
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
aristidetm/k8s-hub:3.3.7ccb516cb8474
setuptools@65.5.1
70.0.0

Open the chart page →

16,604
daejeon_2-3daejeon2-30.1.01 of 2See more

daejeon_2-3 daejeon2-3 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
clsen2024/daejeon_2-3:latest1156cd87c8fb
setuptools@58.1.0
70.0.0

Open the chart page →

1,141
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
setuptools@68.2.2
70.0.0

Open the chart page →

6,179
proxmox-exporterdamounVerified publisher1.10.01 of 1See more

proxmox-exporter damoun 1.10.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:3.4.2fcf041f0c24d
py3-setuptools@68.2.2-r0
setuptools@65.5.0
70.3.0-r0
70.0.0

Open the chart page →

1,141
nfs-provisionerdasmeta1.0.31 of 1See more

nfs-provisioner dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
setuptools@40.8.0
70.0.0

Open the chart page →

2,806
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
python-pip@9.0.1-2.3~ubuntu1
setuptools@40.6.3
9.0.1-2.3~ubuntu1.18.04.8+esm4
70.0.0

Open the chart page →

27,728
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
python-pip@9.0.1-2.3~ubuntu1.18.04.2
setuptools@50.3.0
9.0.1-2.3~ubuntu1.18.04.8+esm4
70.0.0

Open the chart page →

18,863
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
setuptools@68.1.2
70.0.0

Open the chart page →

6,123
datacube-owsdatacube-charts0.20.11 of 1See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
setuptools@68.1.2
70.0.0

Open the chart page →

5,974
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
python-pip@9.0.1-2.3~ubuntu1
setuptools@40.6.3
9.0.1-2.3~ubuntu1.18.04.8+esm4
70.0.0

Open the chart page →

22,405
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
python-pip@9.0.1-2.3~ubuntu1
setuptools@40.6.3
9.0.1-2.3~ubuntu1.18.04.8+esm4
70.0.0

Open the chart page →

24,335
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
setuptools@66.1.1-1
setuptools@66.1.1
66.1.1-1+deb12u1
70.0.0

Open the chart page →

10,090
kube-web-viewdecayofmind0.0.41 of 1See more

kube-web-view decayofmind 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
setuptools@50.3.0
70.0.0

Open the chart page →

2,264
intel-gpu-exporterdefault-ghVerified publisher0.1.01 of 1See more

intel-gpu-exporter default-gh 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
setuptools@59.6.0-1.2ubuntu0.22.04.1
setuptools@59.6.0
59.6.0-1.2ubuntu0.22.04.2
70.0.0

Open the chart page →

4,798
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
setuptools@46.1.3
70.0.0

Open the chart page →

4,422
prometheus-aws-costs-exporterdeliveryheroVerified publisher0.1.51 of 1See more

prometheus-aws-costs-exporter deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
setuptools@40.2.0
70.0.0

Open the chart page →

3,553
rds-downscalerdeliveryheroVerified publisher1.0.51 of 1See more

rds-downscaler deliveryhero 1.0.5

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
library/python:3.7.0-alpine3.8e12594db7297
setuptools@40.4.3
70.0.0

Open the chart page →

574
testdeploymentapp0.1.01 of 1See more

test deploymentapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
cbanuka/pythonapp:latestc742770d4247
setuptools@29.0.1.post20161130
70.0.0

Open the chart page →

409
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
python-pip@20.0.2-5ubuntu1.9
setuptools@45.2.0-1ubuntu0.1
setuptools@67.6.1
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0

Open the chart page →

14,856
design-cataloguedesign-catalogue0.1.01 of 2See more

design-catalogue design-catalogue 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
setuptools@51.0.0
70.0.0

Open the chart page →

2,770
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
setuptools@59.6.0-1.2
59.6.0-1.2ubuntu0.22.04.2

Open the chart page →

30,031
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
setuptools@59.6.0-1.2
59.6.0-1.2ubuntu0.22.04.2

Open the chart page →

29,033
devops-diplomdevops-diplom-chartVerified publisher0.8.01 of 2See more

devops-diplom devops-diplom-chart 0.8.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
alexeyr7/sf-test-app:latestdf0b41fdbd53
setuptools@58.1.0
70.0.0

Open the chart page →

2,548
kube-openid-connectdevopstalesVerified publisher1.1.01 of 1See more

kube-openid-connect devopstales 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
devopstales/kube-openid-connector:1.042c40a0e9f1b
setuptools@57.5.0
70.0.0

Open the chart page →

1,333
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
setuptools@40.8.0
70.0.0

Open the chart page →

10,466
kube-prometheus-stackdevtron19.3.01 of 6See more

kube-prometheus-stack devtron 19.3.0

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.14.235654389f8a9
setuptools@57.5.0
70.0.0

Open the chart page →

8,645
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
setuptools@40.8.0
70.0.0

Open the chart page →

10,466
kube-prometheus-stackdevtron-labs19.3.01 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.14.235654389f8a9
setuptools@57.5.0
70.0.0

Open the chart page →

8,645
difydify1.0.02 of 4See more

dify dify 1.0.0

2 of the 4 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:main-localda995c129e2f
setuptools@68.1.2
70.0.0
langgenius/dify-sandbox:0.2.009b7e8705673
setuptools@65.5.1
70.0.0

Open the chart page →

19,224

Container images carrying it

1,039 by charts deploying them

A fixed version is listed for 17 of the 17 affected packages.

Container imageDigestPackageFixed inUsed by
hjacobs/kube-downscaler:23.2.05d328c003efe
setuptools@65.5.1
70.0.0
1
hjacobs/kube-janitor:23.7.0fbb303ed463c
setuptools@65.5.1
70.0.0
1
hjacobs/kube-ops-view:23.5.0a4fae38f93d7
setuptools@65.5.1
70.0.0
1
hjacobs/kube-resource-report:21.2.145f93491c434
setuptools@53.0.0
70.0.0
1
hjacobs/kube-resource-report:22.11.0c173cd02f5af
setuptools@63.2.0
70.0.0
1
hjacobs/kube-web-view:23.8.0431f1bf013d0
setuptools@65.5.1
70.0.0
1
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
setuptools@50.3.0
70.0.0
1
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
setuptools@58.1.0
70.0.0
1
hmdmph/mongo-pod-labeler:1.0.1-alpine79e4a170f3dc
setuptools@40.8.0
70.0.0
1
hmdmph/redis-pod-labeler:1.0.0-alpine7f1381fe0f3b
setuptools@47.1.1
70.0.0
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
setuptools@68.2.2
70.0.0
1
homeassistant/home-assistant:2023.12.48d000332b09b
setuptools@68.2.2
70.0.0
1
i4trust/activation-service:2.2.09f3719176893
setuptools@57.5.0
70.0.0
1
ibmcom/app-nav-init:1.0.1240ff499eb5b
python-setuptools@0.9.8-7.el7
setuptools@0.9.8
0:0.9.8-7.el7_9.1
70.0.0
1
ibmcom/app-nav-ui:1.0.1e2a86997b36b
python-setuptools@0.9.8-7.el7
setuptools@0.9.8
0:0.9.8-7.el7_9.1
70.0.0
1
ibmcom/bai-admin-dev:19.0.202d882f2836e
python-setuptools@0.9.8-7.el7
setuptools@0.9.8
0:0.9.8-7.el7_9.1
70.0.0
1
ibmcom/bai-elasticsearch-dev:19.0.25441dba2fa00
python-setuptools@0.9.8-7.el7
setuptools@0.9.8
0:0.9.8-7.el7_9.1
70.0.0
1
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
python-setuptools@0.9.8-7.el7
setuptools@0.9.8
0:0.9.8-7.el7_9.1
70.0.0
1
ibmcom/bai-flink-zookeeper-dev:19.0.258548034cf55
python-setuptools@0.9.8-7.el7
setuptools@0.9.8
0:0.9.8-7.el7_9.1
70.0.0
1
ibmcom/bai-setup-dev:19.0.2b8e8df11072d
python-setuptools@0.9.8-7.el7
setuptools@0.9.8
0:0.9.8-7.el7_9.1
70.0.0
1
ibmcom/ibmcloud-object-storage-driver:1.8.16c796a4c693b4
python-setuptools@39.2.0-5.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
ibmcom/ibmcloud-object-storage-plugin:1.8.169c73804b37a3
python-setuptools@39.2.0-5.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
ibmcom/ibm-enterprise-mongodb-ppc64le:4.4d28bf361327a
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
1
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
setuptools@41.0.1
70.0.0
1
ibmcom/icp-storage-util:3.2.0c44e1ef21075
setuptools@40.6.3.post20190116
70.0.0
1
ibmcom/postgresql:9.6.665e35146ef82
setuptools@0.9.8
70.0.0
1
ibmcom/voice-gateway-mr:1.0.5.00762ab1df6c1
python-setuptools@0.9.8-7.el7
setuptools@0.9.8
0:0.9.8-7.el7_9.1
70.0.0
1
ihatemoney/ihatemoney:5.2.0457fda1feb32
setuptools@58.1.0
70.0.0
1
improwised/erpnext-worker:v13.4.197280b55cbd4
setuptools@57.0.0
70.0.0
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0
1
intel/multimodal-data-visualization-streaming:3.01a89327e499b
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.2
70.0.0
1
invoiceninja/invoiceninja:5.6.241437916dee01
py3-setuptools@67.7.2-r0
setuptools@67.7.2
70.3.0-r0
70.0.0
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
setuptools@46.1.3
70.0.0
1
irakli/ms-hello-python:latest9e7a91ba9ae0
setuptools@63.2.0
70.0.0
1
istio/examples-bookinfo-productpage-v1:1.17.06668bcf42ef0
setuptools@47.1.1
70.0.0
1
istio/examples-helloworld-v1:latest328b237e4fb1
setuptools@69.0.3
70.0.0
1
istio/examples-helloworld-v2:latest0a7f02b2c7c9
setuptools@69.0.3
70.0.0
1
jaedb/iris:latest048cfbf58d57
setuptools@66.1.1
70.0.0
1
jakuboskera/guestbook:v0.3.04989afa06e74
setuptools@57.5.0
70.0.0
1
jakuboskera/todo:v0.2.3714b1adbbc2d
setuptools@58.1.0
70.0.0
1
jamoos/kweather:history163e2e8a6e87
setuptools@57.5.0
70.0.0
1
jertel/elastalert2:2.2.34dcc0ef93efc
setuptools@57.5.0
70.0.0
1
jjorozco20/flask-mysql-app:1.0.0b5e44e3ba09c
setuptools@58.1.0
70.0.0
1
jmferrer/azure-devops-agent:latest030f68ec6998
setuptools@39.0.1
70.0.0
1
john19968010/fastapi-template:latest31a90f6bd69c
setuptools@65.5.1
70.0.0
1
josh5/unmanic:0.2.64d49c4816260
setuptools@59.6.0-1.2ubuntu0.22.04.1
setuptools@59.6.0
59.6.0-1.2ubuntu0.22.04.2
70.0.0
1
juicedata/juicefs-csi-driver:v0.20.043978fc60798
setuptools@57.5.0
70.0.0
1
juicedata/juicefs-csi-driver:v0.32.595008ba63318
setuptools@58.1.0
70.0.0
1
julb/alertmanager-gchat-integration:1.0.5837c4038a0dd
setuptools@54.1.1
70.0.0
1
julb/http-reqtrace:1.1.00806409af397
setuptools@50.3.2
70.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.