StackRadar

CVE-2024-6345

High

Advisory

Published 15 Jul 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.019
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
974
of 17,787 indexed, latest versions
Container images
1,036
deployed by those charts
Fix available
17 of 17
affected packages

setuptools vulnerable to Command Injection via package URL

Carried by container images the latest versions of 974 of 17,787 indexed charts deploy, on 1,036 images.

Affected packageAffected versionsFixed inImages
setuptoolspypi0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+103 more70.0.0986
python-setuptoolsrpm0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+3 more0:0.9.8-7.el7_9.1, 0:39.2.0-6.el8_4.1, 0:39.2.0-7.el8_6.1, 0:39.2.0-7.el8_8.1+3 more115
setuptoolsdeb45.2.0-1, 45.2.0-1ubuntu0.1, 59.6.0-1.2, 59.6.0-1.2ubuntu0.22.04.1+2 more45.2.0-1ubuntu0.2, 59.6.0-1.2ubuntu0.22.04.2, 66.1.1-1+deb12u1, 68.1.2-2ubuntu1.1101
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+11 more1.5.4-1ubuntu4+esm5, 8.1.1-2ubuntu0.6+esm8, 9.0.1-2.3~ubuntu1.18.04.8+esm4, 20.0.2-5ubuntu1.10+esm260
python-setuptoolsdeb3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more3.3-1ubuntu2+esm2, 20.7.0-1ubuntu0.1~esm2, 39.0.1-2ubuntu0.1+esm1, 44.0.0-2ubuntu0.1+esm139
py3-setuptoolsapk65.6.0-r0, 67.7.2-r0, 68.2.2-r0, 69.5.1-r070.3.0-r021
python-chardetrpm3.0.4-7.el80:3.0.4-19.module+el8.4.0+9822+20bf124920
python-idnarpm2.5-5.el80:2.10-3.module+el8.4.0+9822+20bf124920
python-pysocksrpm1.6.8-3.el80:1.7.1-4.module+el8.4.0+9822+20bf124920
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_80:2.25.0-2.module+el8.4.0+9822+20bf124920
python-urllib3rpm1.24.2-5.el8, 1.24.2-5.el8_6.10:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be120
python3x-setuptoolsrpm41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+548604230:50.3.2-3.module+el8.4.0+22168+8a561f05.2, 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b9
python-plyrpm3.9-9.el80:3.11-10.module+el8.4.0+9822+20bf12497
python39rpm3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.10:3.9.2-2.module+el8.4.0+20027+45e0e702.2, 0:3.9.16-1.module+el8.8.0+20025+f2100191.26
python3x-piprpm19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf12490:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c4884
python3.11-setuptoolsrpm65.5.1-2.el90:65.5.1-2.el9_4.11
python-wheelrpm0.33.6-5.module+el8.4.0+8888+89bc7e791:0.35.1-3.module+el8.4.0+15042+dc5a279b.11
OSV records
ALPINE-CVE-2024-6345DEBIAN-CVE-2024-6345GHSA-cx63-2mw6-8hw5RHSA-2024:5000RHSA-2024:5040RHSA-2024:5078RHSA-2024:5084RHSA-2024:5137RHSA-2024:5279RHSA-2024:5530RHSA-2024:5534RHSA-2024:6220RHSA-2024:6488RHSA-2024:6662UBUNTU-CVE-2024-6345RLSA-2024:5530
Also known as
BIT-setuptools-2024-6345, PYSEC-2026-1918, RHSA-2024:6907, USN-7002-1

Charts affected

974 by stars
ChartLatestAffected imagesRadar Score
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
setuptools@45.2.0-1
45.2.0-1ubuntu0.2

Open the chart page →

14,364
webhookie-allwebhookie0.1.22 of 3See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
setuptools@45.2.0-1
45.2.0-1ubuntu0.2
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-6.el8_4.1
70.0.0

Open the chart page →

28,605
welcome-elos-webappwelcome-elos-webappVerified publisher2.0.01 of 1See more

welcome-elos-webapp welcome-elos-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
pococze/python-hello-elos:2.0.07a1aab425e51
setuptools@58.1.0
70.0.0

Open the chart page →

2,678
ambassadorwenerme6.9.51 of 2See more

ambassador wenerme 6.9.5

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
setuptools@50.3.2
70.0.0

Open the chart page →

4,086
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
setuptools@41.2.0
70.0.0

Open the chart page →

4,984
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
setuptools@58.1.0
70.0.0

Open the chart page →

9,117
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

6,138
sambawenerme1.0.01 of 1See more

samba wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
wener/samba:4.13.39a42bae466d4
setuptools@51.3.3
70.0.0

Open the chart page →

2,555
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.15.135034611d981
setuptools@44.1.1
70.0.0

Open the chart page →

22,665
ceph-csi-cephfswikimedia0.1.81 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
setuptools@39.2.0
70.0.0

Open the chart page →

10,285
ceph-csi-rbdwikimedia0.1.131 of 6See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
setuptools@39.2.0
70.0.0

Open the chart page →

11,784
docker-hub-rate-limit-exporterwiremindVerified publisher0.3.01 of 1See more

docker-hub-rate-limit-exporter wiremind 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
viadee/docker-hub-rate-limit-exporter:version-1.52e27e3b3ee56
setuptools@52.0.0
70.0.0

Open the chart page →

1,843
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
setuptools@65.5.1
70.0.0

Open the chart page →

5,542
pypiwiremindVerified publisher0.2.11 of 1See more

pypi wiremind 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
codekoala/pypi:1.2.14a999b2cfff2
setuptools@29.0.1.post20161130
70.0.0

Open the chart page →

423
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
setuptools@0.9.8
70.0.0

Open the chart page →

5,806
powerdnsadminwitcom-gmbh0.3.41 of 1See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
setuptools@51.3.3
70.0.0

Open the chart page →

2,643
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

11,577
xkopsxkops0.1.03 of 5See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
setuptools@58.1.0
70.0.0
hamzaarshad10/querypodpy:1.7154f38e8668e
setuptools@65.5.1
70.0.0
murtazashah46/helmfile:latest4d11726cf803
setuptools@58.1.0
70.0.0

Open the chart page →

13,677
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
py3-setuptools@65.6.0-r0
setuptools@65.6.0
70.3.0-r0
70.0.0

Open the chart page →

5,846
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0

Open the chart page →

6,016
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
setuptools@65.5.1
70.0.0

Open the chart page →

1,838
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
setuptools@65.5.0
70.0.0

Open the chart page →

1,589
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
setuptools@57.5.0
70.0.0

Open the chart page →

3,118
grafana-matrix-forwarderzloi-space1.0.01 of 2See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-6345.

Container imageDigestPackageFixed in
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
setuptools@57.5.0
70.0.0

Open the chart page →

1,636

Container images carrying it

1,036 by charts deploying them

A fixed version is listed for 17 of the 17 affected packages.

Container imageDigestPackageFixed inUsed by
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
70.0.0
22
oomk8s/readiness-check:2.0.2875814cc853d
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@40.8.0
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
11
codeurjc/server:v1.0310bea5b1ee7
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
8
oomk8s/readiness-check:2.0.07daa08b81954
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@39.0.1
8.1.1-2ubuntu0.6+esm8
20.7.0-1ubuntu0.1~esm2
70.0.0
6
cachethq/docker:2.3.15a61ff0f67ea7
setuptools@33.1.1.post20171031
70.0.0
4
mastercloudapps/server:v2.23f3d24dfe2686
python-setuptools@39.2.0-6.el8
setuptools@39.2.0
0:39.2.0-8.el8_10
70.0.0
4
ncsa/checks:1.0.1cc46a03e16ed
setuptools@57.5.0
70.0.0
4
opea/llm-tgi:1.00c25aab3f106
setuptools@65.5.1
70.0.0
4
quay.io/strimzi/operator:0.37.052f376e64b9b
python-setuptools@39.2.0-7.el8
setuptools@39.2.0
0:39.2.0-7.el8_8.1
70.0.0
4
argoproj/argocd:v1.8.1830e86cacefd
setuptools@40.8.0
70.0.0
3
cloudve/cloudlaunch-server:latest4a3d7fae90bb
python-pip@20.0.2-5ubuntu1.6
setuptools@45.2.0-1
setuptools@45.2.0
20.0.2-5ubuntu1.10+esm2
45.2.0-1ubuntu0.2
70.0.0
3
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
setuptools@57.5.0
70.0.0
3
dpage/pgadmin4:6.12781369df9994
setuptools@52.0.0
70.0.0
3
kiwigrid/k8s-sidecar:0.1.193170069ff0976
setuptools@49.6.0
70.0.0
3
kiwigrid/k8s-sidecar:0.1.1517b98eecdf6d1
setuptools@46.1.3
70.0.0
3
paulkellerman/resultserver-app:1.0381eeccb0618
setuptools@65.5.0
70.0.0
3
paulkellerman/webserver-app:latest5a37b74f61b9
setuptools@65.5.0
70.0.0
3
selenium/hub:3.141.5902f251d48d5f
setuptools@45.2.0-1
45.2.0-1ubuntu0.2
3
quay.io/kiwigrid/k8s-sidecar:1.14.235654389f8a9
setuptools@57.5.0
70.0.0
3
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
setuptools@40.8.0
70.0.0
3
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-ply@3.9-9.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
setuptools@39.2.0
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:3.11-10.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-7.el8_6.1
0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
70.0.0
3
amancevice/superset:0.35.212a0a9e66550
setuptools@44.0.0
70.0.0
2
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
setuptools@0.9.8
70.0.0
2
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
setuptools@40.6.3.post20190116
70.0.0
2
apache/tika:2.9.2.1-fullae0b86d3c4d0
setuptools@68.1.2-2ubuntu1
68.1.2-2ubuntu1.1
2
aquasec/kube-hunter:0.6.8e64fe49f059f
setuptools@57.5.0
70.0.0
2
architectminds/aws-kubectl:1.19735e59a1085
setuptools@41.0.1
70.0.0
2
blakeblackshear/frigate:0.11.18330b0a265b8
setuptools@52.0.0
70.0.0
2
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
python-setuptools@39.2.0-7.el8
python39@3.9.16-1.module+el8.8.0+18968+3d7b19f0.1
python3x-setuptools@50.3.2-4.module+el8.5.0+12204+54860423
setuptools@50.3.2
0:39.2.0-7.el8_8.1
0:3.9.16-1.module+el8.8.0+20025+f2100191.2
0:50.3.2-6.module+el8.8.0+22158+89b6fb7b
70.0.0
2
confluentinc/cp-zookeeper:latest7610a50b13e7
setuptools@39.2.0
70.0.0
2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
python-setuptools@39.2.0-7.el8
python39@3.9.16-1.module+el8.8.0+18968+3d7b19f0.1
python3x-setuptools@50.3.2-4.module+el8.5.0+12204+54860423
setuptools@39.2.0
0:39.2.0-7.el8_8.1
0:3.9.16-1.module+el8.8.0+20025+f2100191.2
0:50.3.2-6.module+el8.8.0+22158+89b6fb7b
70.0.0
2
cs3org/wopiserver:v9.4.202a9e78757b4
setuptools@67.4.0
70.0.0
2
datawire/aes:1.14.48588eafe6862
setuptools@50.3.2
70.0.0
2
devopsjourney1/mywebapp:latestbd1ec6838570
setuptools@57.5.0
70.0.0
2
gradiant/spark:2.4.4-python-alpine97657d56e927
setuptools@41.6.0
70.0.0
2
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
setuptools@65.5.1
70.0.0
2
hjacobs/kube-ops-view:20.4.058221b57d4d2
setuptools@46.1.3
70.0.0
2
homebridge/homebridge:latest77c685a40911
setuptools@68.1.2
70.0.0
2
hookiesolutions/webhookie:latest0629694246ba
setuptools@45.2.0-1
45.2.0-1ubuntu0.2
2
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
setuptools@41.0.1
70.0.0
2
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
setuptools@41.0.1
70.0.0
2
jvstein/bitcoin-prometheus-exporter:v0.6.07645ba790ea8
setuptools@57.0.0
70.0.0
2
kiwigrid/k8s-sidecar:1.24.44138bea678f0
setuptools@68.0.0
70.0.0
2
kiwigrid/k8s-sidecar:1.24.35af76eebbba7
setuptools@65.5.1
70.0.0
2
kodekloud/examplevotingapp_vote:v13a856afb02a3
setuptools@58.1.0
70.0.0
2
langgenius/dify-sandbox:0.2.009b7e8705673
setuptools@65.5.1
70.0.0
2
larribas/mlflow:1.9.105ccb0b46bfb
setuptools@46.1.3
70.0.0
2
library/mysql:8.2.0212fe73edca5
setuptools@50.3.2
70.0.0
2
library/python:3.7.0-alpine3.8e12594db7297
setuptools@40.4.3
70.0.0
2
library/python:3.7eedf63967cdb
setuptools@57.5.0
70.0.0
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.