StackRadar

CVE-2025-47273

High

Advisory

Published 17 May 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.015
73rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,086
of 17,787 indexed, latest versions
Container images
1,156
deployed by those charts
Fix available
18 of 19
affected packages

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

Carried by container images the latest versions of 1,086 of 17,787 indexed charts deploy, on 1,156 images.

Affected packageAffected versionsFixed inImages
setuptoolspypi0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+124 more78.1.11,083
setuptoolsdeb45.2.0-1, 45.2.0-1ubuntu0.1, 45.2.0-1ubuntu0.2, 52.0.0-4+8 more45.2.0-1ubuntu0.3, 52.0.0-4+deb11u2, 59.6.0-1.2ubuntu0.22.04.3, 66.1.1-1+deb12u2+1 more154
python-setuptoolsdeb3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more3.3-1ubuntu2+esm3, 20.7.0-1ubuntu0.1~esm3, 39.0.1-2ubuntu0.1+esm2, 44.0.0-2ubuntu0.1+esm239
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+5 more8.1.1-2ubuntu0.6+esm12, 9.0.1-2.3~ubuntu1.18.04.8+esm830
py3-pipapk25.0.1-r0, 25.2-r0, 26.0.1-r1no fix listed3
setuptoolsbitnami70.3.078.1.12
python-setuptoolsrpm0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+6 more0:0.9.8-7.el7_9.2, 0:39.2.0-9.el8_10, 0:53.0.0-13.el9_6.1138
python-chardetrpm3.0.4-7.el80:3.0.4-19.module+el8.4.0+9822+20bf124920
python-idnarpm2.5-5.el80:2.10-3.module+el8.4.0+9822+20bf124920
python-pysocksrpm1.6.8-3.el80:1.7.1-4.module+el8.4.0+9822+20bf124920
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_80:2.25.0-2.module+el8.4.0+9822+20bf124920
python-urllib3rpm1.24.2-5.el8, 1.24.2-5.el8_6.10:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be120
python3x-setuptoolsrpm41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+548604230:50.3.2-3.module+el8.4.0+23445+8885b4ac.3, 0:50.3.2-7.module+el8.8.0+23471+79c1a0709
python-plyrpm3.9-9.el80:3.11-10.module+el8.4.0+9822+20bf12497
python39rpm3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.10:3.9.2-2.module+el8.4.0+22379+dcc60181.4, 0:3.9.16-1.module+el8.8.0+22374+62aa8e74.46
python3x-piprpm19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf12490:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c4884
python3.11-setuptoolsrpm65.5.1-2.el9, 65.5.1-2.el9_4.10:65.5.1-4.el9_62
python-wheelrpm0.33.6-5.module+el8.4.0+8888+89bc7e791:0.35.1-3.module+el8.4.0+15042+dc5a279b.11
python-3.11deb3.11.15+e43.11.16+e21
OSV records
BIT-setuptools-2025-47273CGA-6rww-wjff-6g99CGA-gfc8-q7jm-4w3vDEBIAN-CVE-2025-47273PYSEC-2025-49RHSA-2025:10407RHSA-2025:11036RHSA-2025:11984RHSA-2025:13578RHSA-2025:15408RHSA-2025:15410RHSA-2025:15411RLSA-2025:10407RLSA-2025:11036UBUNTU-CVE-2025-47273DLA-4183-1ECHO-2d75-a206-3684USN-7544-1
Also known as
CGA-wrp2-2xv2-hfvv, CGA-xqm6-7hq3-gpvg, GHSA-5rjg-fvgr-3xxf, RHSA-2025:11424, RHSA-2025:11425, RHSA-2025:11426, RHSA-2025:11427, RHSA-2025:11868, RHSA-2025:12020, RHSA-2025:13669, USN-8010-1

Charts affected

1,086 by stars
ChartLatestAffected imagesRadar Score
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
setuptools@68.2.2
78.1.1

Open the chart page →

13,031
spark-standalonedmwm-bigdataVerified publisher0.1.01 of 2See more

spark-standalone dmwm-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
setuptools@41.6.0
78.1.1

Open the chart page →

6,147
dnation-kubernetes-jsonnet-translatordnationcloud2.0.11 of 1See more

dnation-kubernetes-jsonnet-translator dnationcloud 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
setuptools@57.5.0
78.1.1

Open the chart page →

3,626
dnation-kubernetes-linterdnationcloud0.1.21 of 1See more

dnation-kubernetes-linter dnationcloud 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-linter:0.2.1dee6376560f5
setuptools@40.8.0
78.1.1

Open the chart page →

2,115
dnation-kubernetes-monitoringdnationcloud3.0.21 of 1See more

dnation-kubernetes-monitoring dnationcloud 3.0.2

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
setuptools@57.5.0
78.1.1

Open the chart page →

3,626
dnation-kubernetes-monitoring-stackdnationcloud4.0.22 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

2 of the 17 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
setuptools@57.5.0
78.1.1
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
setuptools@75.1.0
78.1.1

Open the chart page →

21,455
vmware-exporterdniel0.0.11 of 1See more

vmware-exporter dniel 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
pryorda/vmware_exporter:v0.18.3e0f5ba8b7856
setuptools@57.5.0
78.1.1

Open the chart page →

1,351
doris-foundationdbdorisVerified publisher25.8.03 of 4See more

doris-foundationdb doris 25.8.0

3 of the 4 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
foundationdb/foundationdb-kubernetes-sidecar:6.3.23-107e0ae17a7ca
setuptools@41.6.0
78.1.1
foundationdb/foundationdb-kubernetes-sidecar:6.2.30-19ceb2f948c9f
setuptools@53.0.0
78.1.1
foundationdb/foundationdb-kubernetes-sidecar:7.1.38-1da1ee2731024
setuptools@41.6.0
78.1.1

Open the chart page →

3,166
codecovdoubanVerified publisher0.2.43 of 8See more

codecov douban 0.2.4

3 of the 8 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
setuptools@59.6.0
78.1.1
codecov/self-hosted-worker:24.4.1837f546b479b
setuptools@69.2.0
78.1.1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
setuptools@59.6.0-1.2
setuptools@59.6.0
59.6.0-1.2ubuntu0.22.04.3
78.1.1

Open the chart page →

24,975
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
setuptools@58.1.0
78.1.1

Open the chart page →

4,550
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
setuptools@65.5.0
78.1.1

Open the chart page →

3,660
seleniumdoubanVerified publisher1.3.21 of 1See more

selenium douban 1.3.2

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
setuptools@45.2.0-1
45.2.0-1ubuntu0.3

Open the chart page →

11,831
tinyproxy-exporterdoubanVerified publisher0.1.21 of 1See more

tinyproxy-exporter douban 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
setuptools@57.5.0
78.1.1

Open the chart page →

3,421
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

55,988
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
setuptools@59.6.0-1.2
setuptools@59.6.0
59.6.0-1.2ubuntu0.22.04.3
78.1.1

Open the chart page →

30,759
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.19.26a8671702d6f
setuptools@58.1.0
78.1.1

Open the chart page →

13,558
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

6,914
rook-cephdtrdnk-helm-chartsVerified publisher0.0.11 of 2See more

rook-ceph dtrdnk-helm-charts 0.0.1

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
rook/ceph:v1.19.2944a1dd70496
setuptools@69.2.0
78.1.1

Open the chart page →

1,990
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.22.4258958fe2ff2
setuptools@67.7.2
78.1.1

Open the chart page →

20,204
pgdump-to-s3duck-helm0.1.41 of 1See more

pgdump-to-s3 duck-helm 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/ducksify/pgdump-to-s3:latestc42c0946bd0f
setuptools@52.0.0-4
52.0.0-4+deb11u2

Open the chart page →

1,362
amundsenduyet1.1.03 of 7See more

amundsen duyet 1.1.0

3 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
setuptools@46.1.3
78.1.1
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
setuptools@49.6.0
78.1.1
amundsendev/amundsen-search:2.4.099dda9502c3e
setuptools@49.6.0
78.1.1

Open the chart page →

11,174
grafana-dashboardsdysnixVerified publisher0.2.21 of 2See more

grafana-dashboards dysnix 0.2.2

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.10.718feb3906286
setuptools@53.0.0
78.1.1

Open the chart page →

5,161
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
dysnix/pritunl:v1.29-r819951e3e7a32
setuptools@42.0.0
78.1.1

Open the chart page →

5,055
hlo-allocatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-allocator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
eclipseaerios/hlo-allocator:v3.0.03cc1d94cfe96
setuptools@75.0.0
78.1.1

Open the chart page →

1,512
hlo-data-aggregatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-data-aggregator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
eclipseaerios/hlo-data-aggregator:v3.0.0b433c2b9f5dc
setuptools@75.0.0
78.1.1

Open the chart page →

1,655
hlo-deployment-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-deployment-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
eclipseaerios/hlo-deployment-engine:v3.0.0d582d39208c7
setuptools@75.0.0
78.1.1

Open the chart page →

1,665
hlo-fe-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-fe-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
eclipseaerios/hlo-fe-engine:v3.0.08ed2df4ca692
setuptools@75.0.0
78.1.1

Open the chart page →

1,655
mintakaeclipse-aeriosVerified publisher1.0.01 of 2See more

mintaka eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
fiware/mintaka:0.7.092a3c5cf43c0
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

11,482
orion-ldeclipse-aeriosVerified publisher1.0.01 of 2See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
fiware/orion-ld:1.10.03c490a746f65
setuptools@39.2.0
78.1.1

Open the chart page →

9,805
egeria-baseegeria-charts4.3.01 of 5See more

egeria-base egeria-charts 4.3.0

1 of the 5 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
setuptools@39.2.0
python-setuptools@39.2.0-7.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

4,046
egeria-ctsegeria-charts4.3.01 of 3See more

egeria-cts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
setuptools@39.2.0
python-setuptools@39.2.0-7.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

4,033
egeria-ptsegeria-charts4.3.01 of 3See more

egeria-pts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
setuptools@39.2.0
python-setuptools@39.2.0-7.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

4,033
odpi-egeria-labegeria-charts4.3.01 of 4See more

odpi-egeria-lab egeria-charts 4.3.0

1 of the 4 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
setuptools@39.2.0
python-setuptools@39.2.0-7.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

4,033
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.3
78.1.1

Open the chart page →

25,239
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

27,667
eoloplannereoloplannerVerified publisher0.1.01 of 7See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

32,336
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

27,667
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

28,539
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

27,667
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

27,812
servereoloserverVerified publisher0.1.01 of 7See more

server eoloserver 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

32,336
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
setuptools@45.2.0-1ubuntu0.1
setuptools@45.2.0
45.2.0-1ubuntu0.3
78.1.1

Open the chart page →

9,383
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.25.2cb4c638ffb1f
setuptools@68.2.2
78.1.1

Open the chart page →

7,366
escvmschedulerescvmscheduler1.0.72 of 3See more

escvmscheduler escvmscheduler 1.0.7

2 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
78.1.1
swisscomcloud/esc-vm-scheduler-web:latestb6639d1a922e
setuptools@65.5.0
78.1.1

Open the chart page →

4,678
nist-data-mirroreugen0.1.21 of 1See more

nist-data-mirror eugen 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/eugenmayer/nist-data-mirror:0.1.1a2162df94729
setuptools@65.6.0
78.1.1

Open the chart page →

1,958
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
setuptools@45.2.0-1
45.2.0-1ubuntu0.3

Open the chart page →

20,987
argocd-version-exporterevilmartians0.0.11 of 1See more

argocd-version-exporter evilmartians 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/evl.ms/argocd-exporter:0.0.136ea8f34aa6b
setuptools@57.5.0
78.1.1

Open the chart page →

2,401
extended-ceph-exporterextended-ceph-exporterVerified publisher1.10.01 of 2See more

extended-ceph-exporter extended-ceph-exporter 1.10.0

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/ceph/ceph:v21.1.05ff3692d2f3f
setuptools@69.0.3
78.1.1

Open the chart page →

2,897
perliteextrim-helm-chartsVerified publisher0.1.01 of 1See more

perlite extrim-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
extrim/perlite:1.5.99cb7eb5598b6
setuptools@70.3.0
78.1.1

Open the chart page →

1,439
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
setuptools@58.1.0
78.1.1

Open the chart page →

4,085

Container images carrying it

1,156 by charts deploying them

A fixed version is listed for 18 of the 19 affected packages.

Container imageDigestPackageFixed inUsed by
sslhep/servicex-did-finder:v1.8.5ab0090083567
setuptools@53.0.0
78.1.1
1
sslhep/x509-secrets:v1.8.5d9e9ecb12d59
setuptools@53.0.0
78.1.1
1
stackstorm/st2actionrunner:3.888235ba70cad
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.3
78.1.1
1
stackstorm/st2api:3.86f56d239d280
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.3
78.1.1
1
stackstorm/st2auth:3.833ecfda16608
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.3
78.1.1
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.3
78.1.1
1
stackstorm/st2notifier:3.8f190a6212195
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.3
78.1.1
1
stackstorm/st2rulesengine:3.8259503496ff9
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.3
78.1.1
1
stackstorm/st2scheduler:3.8b1de2055c362
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.3
78.1.1
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.3
78.1.1
1
stackstorm/st2stream:3.81c8904a3bf67
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.3
78.1.1
1
stackstorm/st2timersengine:3.81bf35bfaf00c
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.3
78.1.1
1
stackstorm/st2workflowengine:3.819fdfffdbba8
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.3
78.1.1
1
stakater/descheduler:v0.3.0a47e96ebb285
setuptools@37.0.0
78.1.1
1
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
setuptools@38.5.2
78.1.1
1
stakewiselabs/bls-horcrux:v1.0.02afd0c0b34cb
setuptools@52.0.0
78.1.1
1
stashapp/stash:latest24dbd7607174
setuptools@45.2.0-1
45.2.0-1ubuntu0.3
1
statcan/ckan:2.93921305425b8
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.3
78.1.1
1
stratospire/activityrelay:0.2.3a4c34cb01117
setuptools@57.5.0
78.1.1
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.3
78.1.1
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
setuptools@41.1.0
78.1.1
1
substratusai/verba:v0.4.0-baseURL261695be635eb
setuptools@65.5.1
78.1.1
1
surajwarbhe/grafana:v185248611e9f1
setuptools@39.2.0
78.1.1
1
svtechnmaa/svtech_csv:v1.0.1b9d7ecf8de24
setuptools@49.3.1
78.1.1
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
python-setuptools@44.0.0-2ubuntu0.1
44.0.0-2ubuntu0.1+esm2
1
svtechnmaa/svtech_icinga2:v1.1.667be2aba9436
setuptools@40.8.0
78.1.1
1
svtechnmaa/svtech_postfix:v1.0.2d5327df8b8a2
setuptools@51.3.3
78.1.1
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
setuptools@45.2.0-1ubuntu0.1
setuptools@69.5.1
45.2.0-1ubuntu0.3
78.1.1
1
svtechnmaa/svtech_rundeck_option_provider:v1.1.1674fad30a51f
setuptools@49.3.1
78.1.1
1
swisscomcloud/esc-vm-scheduler-web:latestb6639d1a922e
setuptools@65.5.0
78.1.1
1
t3nde/gtmetrix-bq:0.2.0d2939e9a719b
setuptools@46.1.3
78.1.1
1
tachyongroup/mlflow-deployment-controller:mlflow-controller-0.1.87e79b9000856
setuptools@57.5.0
78.1.1
1
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
setuptools@58.0.4
78.1.1
1
taemon1337/image-api:0.0.1247bc1dc4f07
setuptools@57.5.0
78.1.1
1
taigaio/taiga-back:6.4.29f97323cc150
setuptools@57.5.0
78.1.1
1
taigaio/taiga-protected:6.4.036318831b3e7
setuptools@47.1.0
78.1.1
1
tautulli/tautulli:v2.7.7c4da15f058ea
setuptools@57.4.0
78.1.1
1
teknas09/bird-pod:latest12a1fa85c4aa
setuptools@69.2.0
78.1.1
1
temporalio/admin-tools:1.22.4258958fe2ff2
setuptools@67.7.2
78.1.1
1
temporalio/admin-tools:1.15.135034611d981
setuptools@44.1.1
78.1.1
1
temporalio/admin-tools:1.26.237e2e33dbd7b
setuptools@65.5.0
78.1.1
1
temporalio/admin-tools:1.22.0836af062af30
setuptools@67.7.2
78.1.1
1
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
setuptools@65.5.0
78.1.1
1
tenableofficial/nessus:latestc88e43fe1a8c
setuptools@39.2.0
78.1.1
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
setuptools@38.5.1
78.1.1
1
th0th/node-red:4.0.3-debiand06fa39f7406
setuptools@52.0.0-4+deb11u1
52.0.0-4+deb11u2
1
thecloudspark/app-vote:1.0c7da7417a86a
setuptools@56.0.0
78.1.1
1
thelande/kasa_exporter:v0.2.3a1fdb8baa152
setuptools@70.0.0
78.1.1
1
thingsboard/toolbox:1.13.01bd61a0da6d3
setuptools@70.3.0
78.1.1
1
thongngo3301/stakefish:latesta341af5976e3
setuptools@65.5.1
78.1.1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.