StackRadar

CVE-2025-47273

High

Advisory

Published 17 May 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.015
73rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,086
of 17,787 indexed, latest versions
Container images
1,156
deployed by those charts
Fix available
18 of 19
affected packages

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

Carried by container images the latest versions of 1,086 of 17,787 indexed charts deploy, on 1,156 images.

Affected packageAffected versionsFixed inImages
setuptoolspypi0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+124 more78.1.11,083
setuptoolsdeb45.2.0-1, 45.2.0-1ubuntu0.1, 45.2.0-1ubuntu0.2, 52.0.0-4+8 more45.2.0-1ubuntu0.3, 52.0.0-4+deb11u2, 59.6.0-1.2ubuntu0.22.04.3, 66.1.1-1+deb12u2+1 more154
python-setuptoolsdeb3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more3.3-1ubuntu2+esm3, 20.7.0-1ubuntu0.1~esm3, 39.0.1-2ubuntu0.1+esm2, 44.0.0-2ubuntu0.1+esm239
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+5 more8.1.1-2ubuntu0.6+esm12, 9.0.1-2.3~ubuntu1.18.04.8+esm830
py3-pipapk25.0.1-r0, 25.2-r0, 26.0.1-r1no fix listed3
setuptoolsbitnami70.3.078.1.12
python-setuptoolsrpm0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+6 more0:0.9.8-7.el7_9.2, 0:39.2.0-9.el8_10, 0:53.0.0-13.el9_6.1138
python-chardetrpm3.0.4-7.el80:3.0.4-19.module+el8.4.0+9822+20bf124920
python-idnarpm2.5-5.el80:2.10-3.module+el8.4.0+9822+20bf124920
python-pysocksrpm1.6.8-3.el80:1.7.1-4.module+el8.4.0+9822+20bf124920
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_80:2.25.0-2.module+el8.4.0+9822+20bf124920
python-urllib3rpm1.24.2-5.el8, 1.24.2-5.el8_6.10:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be120
python3x-setuptoolsrpm41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+548604230:50.3.2-3.module+el8.4.0+23445+8885b4ac.3, 0:50.3.2-7.module+el8.8.0+23471+79c1a0709
python-plyrpm3.9-9.el80:3.11-10.module+el8.4.0+9822+20bf12497
python39rpm3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.10:3.9.2-2.module+el8.4.0+22379+dcc60181.4, 0:3.9.16-1.module+el8.8.0+22374+62aa8e74.46
python3x-piprpm19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf12490:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c4884
python3.11-setuptoolsrpm65.5.1-2.el9, 65.5.1-2.el9_4.10:65.5.1-4.el9_62
python-wheelrpm0.33.6-5.module+el8.4.0+8888+89bc7e791:0.35.1-3.module+el8.4.0+15042+dc5a279b.11
python-3.11deb3.11.15+e43.11.16+e21
OSV records
BIT-setuptools-2025-47273CGA-6rww-wjff-6g99CGA-gfc8-q7jm-4w3vDEBIAN-CVE-2025-47273PYSEC-2025-49RHSA-2025:10407RHSA-2025:11036RHSA-2025:11984RHSA-2025:13578RHSA-2025:15408RHSA-2025:15410RHSA-2025:15411RLSA-2025:10407RLSA-2025:11036UBUNTU-CVE-2025-47273DLA-4183-1ECHO-2d75-a206-3684USN-7544-1
Also known as
CGA-wrp2-2xv2-hfvv, CGA-xqm6-7hq3-gpvg, GHSA-5rjg-fvgr-3xxf, RHSA-2025:11424, RHSA-2025:11425, RHSA-2025:11426, RHSA-2025:11427, RHSA-2025:11868, RHSA-2025:12020, RHSA-2025:13669, USN-8010-1

Charts affected

1,086 by stars
ChartLatestAffected imagesRadar Score
ekorrecamptocamp30.1.11 of 1See more

ekorre camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
camptocamp/ekorre:0.1.035c91d5fda04
setuptools@45.1.0
78.1.1

Open the chart page →

3,891
pghoardcamptocamp35.8.11 of 1See more

pghoard camptocamp3 5.8.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
camptocamp/pghoard:10bff736b15623
setuptools@33.1.1
78.1.1

Open the chart page →

2,813
prometheus-operatorcamptocamp35.15.11 of 5See more

prometheus-operator camptocamp3 5.15.1

1 of the 5 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
setuptools@40.8.0
78.1.1

Open the chart page →

2,490
snow-webhookcamptocamp31.0.01 of 1See more

snow-webhook camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
camptocamp/snow-webhook:latest2924b43dbf40
setuptools@40.8.0
78.1.1

Open the chart page →

1,310
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.26.237e2e33dbd7b
setuptools@65.5.0
78.1.1

Open the chart page →

16,197
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
setuptools@76.0.0
78.1.1

Open the chart page →

14,865
tsoragecetic0.4.111 of 8See more

tsorage cetic 0.4.11

1 of the 8 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:5.0.1c87b1c07fb53
setuptools@40.5.0
78.1.1

Open the chart page →

12,018
pypi-servercgsimmons0.1.01 of 1See more

pypi-server cgsimmons 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
pypiserver/pypiserver:v1.3.2303ac89b2aa2
setuptools@44.0.0
78.1.1

Open the chart page →

506
ctk-walkthroughchaostoolkit-walkthrough0.1.03 of 3See more

ctk-walkthrough chaostoolkit-walkthrough 0.1.0

3 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
chaostoolkit/back:latest734f3af86125
setuptools@50.3.2
78.1.1
chaostoolkit/front:latest7f4a7eb9f7df
setuptools@50.3.2
78.1.1
chaostoolkit/middle:latestb95ba4961cfc
setuptools@50.3.2
78.1.1

Open the chart page →

5,557
otbrcharts-derwitt-devVerified publisher0.2.01 of 1See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
openthread/otbr:latestf307f59f6432
python-setuptools@39.0.1-2ubuntu0.1
39.0.1-2ubuntu0.1+esm2

Open the chart page →

12,804
chat-searchchat-searchVerified publisher0.1.71 of 1See more

chat-search chat-search 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/hemslo/chat-search:latest39d48995a5bd
setuptools@65.5.1
78.1.1

Open the chart page →

4,048
opensipschetan-opensips0.1.01 of 1See more

opensips chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
chetangautamm/repo:Opensips_Buildb4b94155ff5a
python-setuptools@3.3-1ubuntu2
3.3-1ubuntu2+esm3

Open the chart page →

30,163
sippchetan-opensips0.1.01 of 1See more

sipp chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
chetangautamm/repo:sipp.v3e7f7049e1544
setuptools@45.2.0-1
45.2.0-1ubuntu0.3

Open the chart page →

12,531
countlychristianhuthVerified publisher5.2.12 of 3See more

countly christianhuth 5.2.1

2 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
countly/api:25.05.4f4cc7447c4f5
setuptools@56.0.0
78.1.1
countly/frontend:25.05.42acbc11499b6
setuptools@56.0.0
78.1.1

Open the chart page →

7,295
keycloak-mcp-serverchristianhuthVerified publisher1.2.01 of 1See more

keycloak-mcp-server christianhuth 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/sshaaf/keycloak-mcp-server:0.4.0b7e9cba72f8a
python-setuptools@53.0.0-13.el9
0:53.0.0-13.el9_6.1

Open the chart page →

1,440
kube-ops-viewchristianhuthVerified publisher8.3.31 of 1See more

kube-ops-view christianhuth 8.3.3

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:23.5.0a4fae38f93d7
setuptools@65.5.1
78.1.1

Open the chart page →

1,227
polrchristianhuthVerified publisher4.3.01 of 2See more

polr christianhuth 4.3.0

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ajanvier/polr:2.3.091ac61b88c85
setuptools@51.3.3
78.1.1

Open the chart page →

5,936
syncserverchristianhuthVerified publisher1.3.01 of 1See more

syncserver christianhuth 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
mozilla/syncserver:latest016162bf39d8
setuptools@44.1.0
78.1.1

Open the chart page →

1,382
basechronicleVerified publisher0.0.81 of 1See more

base chronicle 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
setuptools@59.6.0-1.2ubuntu0.22.04.2
59.6.0-1.2ubuntu0.22.04.3

Open the chart page →

4,858
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
setuptools@59.6.0-1.2ubuntu0.22.04.2
setuptools@75.8.0
59.6.0-1.2ubuntu0.22.04.3
78.1.1

Open the chart page →

20,936
check-mkcloudnativeapp0.2.11 of 1See more

check-mk cloudnativeapp 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
nlmacamp/check_mk:latest5dbb8589f824
setuptools@40.6.2
78.1.1

Open the chart page →

2,408
couchdbcloudnativeapp1.1.31 of 3See more

couchdb cloudnativeapp 1.1.3

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
kocolosk/couchdb-statefulset-assembler:1.2.06effb982154e
setuptools@38.2.3
78.1.1

Open the chart page →

2,110
daskcloudnativeapp2.2.12 of 2See more

dask cloudnativeapp 2.2.1

2 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
daskdev/dask:1.1.04ecd7bc35500
setuptools@40.2.0
78.1.1
daskdev/dask-notebook:1.1.0052630f5ca04
setuptools@40.6.3
78.1.1

Open the chart page →

29,922
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
setuptools@38.5.1
78.1.1

Open the chart page →

36,132
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
python-setuptools@20.7.0-1
20.7.0-1ubuntu0.1~esm3

Open the chart page →

27,434
k8s-spot-termination-handlercloudnativeapp1.2.11 of 1See more

k8s-spot-termination-handler cloudnativeapp 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
kubeaws/kube-spot-termination-notice-handler:1.13.0-1c9cd2ba4373a
setuptools@40.8.0
78.1.1

Open the chart page →

2,095
kube-huntercloudnativeapp1.0.21 of 1See more

kube-hunter cloudnativeapp 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
aquasec/kube-hunter:1950bf607ce9308
setuptools@40.6.2
78.1.1

Open the chart page →

1,305
locustcloudnativeapp1.0.01 of 1See more

locust cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
greenbirdit/locust:0.9.0e99d53bdc944
setuptools@40.6.3
78.1.1

Open the chart page →

1,352
prometheus-operatorcloudnativeapp6.4.01 of 7See more

prometheus-operator cloudnativeapp 6.4.0

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.186eb52513d59e
setuptools@41.0.1
78.1.1

Open the chart page →

2,954
seleniumcloudnativeapp1.0.81 of 1See more

selenium cloudnativeapp 1.0.8

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
setuptools@45.2.0-1
45.2.0-1ubuntu0.3

Open the chart page →

11,831
sentry-kubernetescloudnativeapp0.2.01 of 1See more

sentry-kubernetes cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
getsentry/sentry-kubernetes:latest6ac37974fd2a
setuptools@40.8.0
78.1.1

Open the chart page →

1,415
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
setuptools@40.8.0
78.1.1

Open the chart page →

5,060
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@20.7.0
8.1.1-2ubuntu0.6+esm12
20.7.0-1ubuntu0.1~esm3
78.1.1

Open the chart page →

77,798
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
setuptools@39.2.0
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-ply@3.9-9.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-7.el8
python-urllib3@1.24.2-5.el8
python3x-pip@19.3.1-6.module+el8.7.0+15823+8950cfa7
python3x-setuptools@41.6.0-5.module+el8.5.0+12205+a865257a
78.1.1
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:3.11-10.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-9.el8_10
0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
0:20.2.4-7.module+el8.6.0+13003+6bb2c488
0:50.3.2-7.module+el8.8.0+23471+79c1a070

Open the chart page →

25,152
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
setuptools@39.2.0
python-setuptools@39.2.0-5.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

25,454
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
setuptools@51.3.3
78.1.1

Open the chart page →

6,696
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
setuptools@59.4.0
78.1.1

Open the chart page →

6,921
robot-shopcloud-native-toolkit1.1.11 of 12See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
robotshop/rs-payment:latest774b52c6180d
setuptools@57.4.0
78.1.1

Open the chart page →

29,594
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.3
78.1.1

Open the chart page →

12,505
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.3
78.1.1

Open the chart page →

12,176
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.3
78.1.1

Open the chart page →

11,640
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.3
78.1.1

Open the chart page →

16,117
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
python-pip@1.5.4-1ubuntu4
python-setuptools@3.3-1ubuntu2
setuptools@36.5.0.post20170921
no fix listed
3.3-1ubuntu2+esm3
78.1.1
galaxy/galaxy-stable:v18.018e577a626dfd
python-pip@1.5.4-1ubuntu4
python-setuptools@3.3-1ubuntu2
setuptools@39.2.0
no fix listed
3.3-1ubuntu2+esm3
78.1.1

Open the chart page →

70,968
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
cloudve/janis-terminal:latestaf56e77ca587
python-pip@9.0.1-2.3~ubuntu1.18.04.1
python-setuptools@39.0.1-2
setuptools@39.0.1
9.0.1-2.3~ubuntu1.18.04.8+esm8
39.0.1-2ubuntu0.1+esm2
78.1.1

Open the chart page →

14,285
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
setuptools@66.1.1-1+deb12u1
setuptools@66.1.1
66.1.1-1+deb12u2
78.1.1

Open the chart page →

5,994
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
setuptools@46.4.0.post20200518
78.1.1

Open the chart page →

13,170
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
setuptools@65.5.1
78.1.1

Open the chart page →

7,521
clamapicnieg2.0.51 of 2See more

clamapi cnieg 2.0.5

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/mailu/clamav:1.9.5001d30483e4a8
setuptools@65.6.0
78.1.1

Open the chart page →

4,672
pulsarcnieg1.0.82 of 2See more

pulsar cnieg 1.0.8

2 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
setuptools@40.8.0
78.1.1
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
setuptools@40.6.3.post20190116
78.1.1

Open the chart page →

16,860
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
setuptools@68.1.2
78.1.1

Open the chart page →

13,286

Container images carrying it

1,156 by charts deploying them

A fixed version is listed for 18 of the 19 affected packages.

Container imageDigestPackageFixed inUsed by
mintproject/data-catalog:9be70359feabe03ed55bfdbf92c20a7e43ab928b67d2f2103085
setuptools@57.5.0
78.1.1
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
setuptools@65.5.0
78.1.1
1
mirrorgitlabcontainers/gitlab-sidekiq-ce:v13.2.294d1431683fa
setuptools@47.3.1
78.1.1
1
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
setuptools@47.3.1
78.1.1
1
mirrorgitlabcontainers/gitlab-webservice-ce:v13.2.230393f990f5c
setuptools@47.3.1
78.1.1
1
mnaggar3396/python-app:latest371d8ed84b15
setuptools@58.1.0
78.1.1
1
mohameddev006/web-app:v50fbc7360ecf4
setuptools@57.5.0
78.1.1
1
mondata/mlflow:v2.3.0.s3.gc6f94c6caf8bf
setuptools@65.5.1
78.1.1
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
setuptools@69.5.1
78.1.1
1
moreillon/face-recognition-fastapi:x86bacb2ddd8394
setuptools@57.5.0
78.1.1
1
mozilla/syncserver:latest016162bf39d8
setuptools@44.1.0
78.1.1
1
mozilla/syncstorage-rs:0.15.893752877dced
setuptools@52.0.0
setuptools@52.0.0-4
78.1.1
52.0.0-4+deb11u2
1
mshanley80/httpbin2022:latest5b189a70c0fb
setuptools@45.2.0-1
setuptools@60.2.0
45.2.0-1ubuntu0.3
78.1.1
1
muhammedgamal/fp23:latest74b4cd69b6fa
setuptools@65.5.1
78.1.1
1
muluder/prograncontrollermcord:0.1.843b597a93da7
python-setuptools@20.7.0-1
20.7.0-1ubuntu0.1~esm3
1
murtazashah46/helmfile:latest4d11726cf803
setuptools@58.1.0
78.1.1
1
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
setuptools@41.4.0
78.1.1
1
mysql/mysql-cluster:8.0.20e4ea36622cdd
setuptools@40.8.0
78.1.1
1
nabinchhetri/flask-app:v2.0be189fbf3411
setuptools@65.5.1
78.1.1
1
nathanielvarona/pritunl-slack-app:0.1.10b746a34e5597
setuptools@63.2.0
78.1.1
1
ncsa/checks:main0b738bbc8d70
setuptools@65.5.1
78.1.1
1
neilpeterson/aks-helloworld:v1fb47732ef36b
setuptools@38.2.4
78.1.1
1
neilpeterson/chart-tweet:latest64fd8dab075f
setuptools@38.2.4
78.1.1
1
neilpeterson/get-tweet:v28b645ac1a23e
setuptools@39.1.0
78.1.1
1
neilpeterson/osba-container-instances-demo:latest6527b05d5d03
setuptools@38.5.2
78.1.1
1
neilpeterson/osba-cosmos-mongodb-demo:latestf4940e84ed05
setuptools@38.5.2
78.1.1
1
neilpeterson/osba-mysql-demo:latest5859d68a6c9f
setuptools@39.0.1
78.1.1
1
neilpeterson/osba-storage-demo:latest29d229ab446e
setuptools@38.5.2
78.1.1
1
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
setuptools@39.1.0
78.1.1
1
neilpeterson/process-tweet:latest39ce9f92e899
setuptools@39.1.0
78.1.1
1
netbirdio/dashboard:v2.22.215a3aab9a345
setuptools@52.0.0
78.1.1
1
netbirdio/dashboard:v2.90.101b59e1c905c9
setuptools@52.0.0
78.1.1
1
netbirdio/dashboard:v2.90.2332cc31f5f35
setuptools@52.0.0
78.1.1
1
netbirdio/dashboard:v2.13.188b5fb704a8c
setuptools@52.0.0
78.1.1
1
netboxcommunity/netbox:v3.2.83d652dca5351
setuptools@63.4.2
78.1.1
1
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
setuptools@69.5.1
78.1.1
1
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
setuptools@47.0.0
78.1.1
1
ngoduykhanh/powerdns-admin:latest9898a7cf37d2
setuptools@51.3.3
78.1.1
1
nlmacamp/check_mk:latest5dbb8589f824
setuptools@40.6.2
78.1.1
1
nyurik/alpine-python3-requests:lateste0553236e3eb
setuptools@57.1.0
78.1.1
1
octoprint/octoprint:1.4.0106c26efcd8a
setuptools@50.3.2
78.1.1
1
octoprint/octoprint:1.6.1ea3bffae2470
setuptools@57.0.0
78.1.1
1
odaniait/aws-kubectl:latest3fff8a8570ec
setuptools@46.1.1
78.1.1
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
setuptools@70.3.0
78.1.1
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
setuptools@52.0.0
78.1.1
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
python-pip@9.0.1-2.3~ubuntu1.18.04.1
python-setuptools@39.0.1-2
setuptools@39.0.1
9.0.1-2.3~ubuntu1.18.04.8+esm8
39.0.1-2ubuntu0.1+esm2
78.1.1
1
omecproject/onos-progran:1.0.05715e5648aa0
python-setuptools@20.7.0-1
20.7.0-1ubuntu0.1~esm3
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@39.0.1
8.1.1-2ubuntu0.6+esm12
20.7.0-1ubuntu0.1~esm3
78.1.1
1
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
setuptools@65.5.1
78.1.1
1
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
setuptools@65.5.1
78.1.1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.