StackRadar

CVE-2025-47273

High

Advisory

Published 17 May 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.015
73rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,086
of 17,787 indexed, latest versions
Container images
1,156
deployed by those charts
Fix available
18 of 19
affected packages

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

Carried by container images the latest versions of 1,086 of 17,787 indexed charts deploy, on 1,156 images.

Affected packageAffected versionsFixed inImages
setuptoolspypi0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+124 more78.1.11,083
setuptoolsdeb45.2.0-1, 45.2.0-1ubuntu0.1, 45.2.0-1ubuntu0.2, 52.0.0-4+8 more45.2.0-1ubuntu0.3, 52.0.0-4+deb11u2, 59.6.0-1.2ubuntu0.22.04.3, 66.1.1-1+deb12u2+1 more154
python-setuptoolsdeb3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more3.3-1ubuntu2+esm3, 20.7.0-1ubuntu0.1~esm3, 39.0.1-2ubuntu0.1+esm2, 44.0.0-2ubuntu0.1+esm239
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+5 more8.1.1-2ubuntu0.6+esm12, 9.0.1-2.3~ubuntu1.18.04.8+esm830
py3-pipapk25.0.1-r0, 25.2-r0, 26.0.1-r1no fix listed3
setuptoolsbitnami70.3.078.1.12
python-setuptoolsrpm0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+6 more0:0.9.8-7.el7_9.2, 0:39.2.0-9.el8_10, 0:53.0.0-13.el9_6.1138
python-chardetrpm3.0.4-7.el80:3.0.4-19.module+el8.4.0+9822+20bf124920
python-idnarpm2.5-5.el80:2.10-3.module+el8.4.0+9822+20bf124920
python-pysocksrpm1.6.8-3.el80:1.7.1-4.module+el8.4.0+9822+20bf124920
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_80:2.25.0-2.module+el8.4.0+9822+20bf124920
python-urllib3rpm1.24.2-5.el8, 1.24.2-5.el8_6.10:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be120
python3x-setuptoolsrpm41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+548604230:50.3.2-3.module+el8.4.0+23445+8885b4ac.3, 0:50.3.2-7.module+el8.8.0+23471+79c1a0709
python-plyrpm3.9-9.el80:3.11-10.module+el8.4.0+9822+20bf12497
python39rpm3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.10:3.9.2-2.module+el8.4.0+22379+dcc60181.4, 0:3.9.16-1.module+el8.8.0+22374+62aa8e74.46
python3x-piprpm19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf12490:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c4884
python3.11-setuptoolsrpm65.5.1-2.el9, 65.5.1-2.el9_4.10:65.5.1-4.el9_62
python-wheelrpm0.33.6-5.module+el8.4.0+8888+89bc7e791:0.35.1-3.module+el8.4.0+15042+dc5a279b.11
python-3.11deb3.11.15+e43.11.16+e21
OSV records
BIT-setuptools-2025-47273CGA-6rww-wjff-6g99CGA-gfc8-q7jm-4w3vDEBIAN-CVE-2025-47273PYSEC-2025-49RHSA-2025:10407RHSA-2025:11036RHSA-2025:11984RHSA-2025:13578RHSA-2025:15408RHSA-2025:15410RHSA-2025:15411RLSA-2025:10407RLSA-2025:11036UBUNTU-CVE-2025-47273DLA-4183-1ECHO-2d75-a206-3684USN-7544-1
Also known as
CGA-wrp2-2xv2-hfvv, CGA-xqm6-7hq3-gpvg, GHSA-5rjg-fvgr-3xxf, RHSA-2025:11424, RHSA-2025:11425, RHSA-2025:11426, RHSA-2025:11427, RHSA-2025:11868, RHSA-2025:12020, RHSA-2025:13669, USN-8010-1

Charts affected

1,086 by stars
ChartLatestAffected imagesRadar Score
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
setuptools@68.2.2
78.1.1

Open the chart page →

13,031
spark-standalonedmwm-bigdataVerified publisher0.1.01 of 2See more

spark-standalone dmwm-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
setuptools@41.6.0
78.1.1

Open the chart page →

6,147
dnation-kubernetes-jsonnet-translatordnationcloud2.0.11 of 1See more

dnation-kubernetes-jsonnet-translator dnationcloud 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
setuptools@57.5.0
78.1.1

Open the chart page →

3,626
dnation-kubernetes-linterdnationcloud0.1.21 of 1See more

dnation-kubernetes-linter dnationcloud 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-linter:0.2.1dee6376560f5
setuptools@40.8.0
78.1.1

Open the chart page →

2,115
dnation-kubernetes-monitoringdnationcloud3.0.21 of 1See more

dnation-kubernetes-monitoring dnationcloud 3.0.2

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
setuptools@57.5.0
78.1.1

Open the chart page →

3,626
dnation-kubernetes-monitoring-stackdnationcloud4.0.22 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

2 of the 17 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
setuptools@57.5.0
78.1.1
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
setuptools@75.1.0
78.1.1

Open the chart page →

21,455
vmware-exporterdniel0.0.11 of 1See more

vmware-exporter dniel 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
pryorda/vmware_exporter:v0.18.3e0f5ba8b7856
setuptools@57.5.0
78.1.1

Open the chart page →

1,351
doris-foundationdbdorisVerified publisher25.8.03 of 4See more

doris-foundationdb doris 25.8.0

3 of the 4 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
foundationdb/foundationdb-kubernetes-sidecar:6.3.23-107e0ae17a7ca
setuptools@41.6.0
78.1.1
foundationdb/foundationdb-kubernetes-sidecar:6.2.30-19ceb2f948c9f
setuptools@53.0.0
78.1.1
foundationdb/foundationdb-kubernetes-sidecar:7.1.38-1da1ee2731024
setuptools@41.6.0
78.1.1

Open the chart page →

3,166
codecovdoubanVerified publisher0.2.43 of 8See more

codecov douban 0.2.4

3 of the 8 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
setuptools@59.6.0
78.1.1
codecov/self-hosted-worker:24.4.1837f546b479b
setuptools@69.2.0
78.1.1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
setuptools@59.6.0-1.2
setuptools@59.6.0
59.6.0-1.2ubuntu0.22.04.3
78.1.1

Open the chart page →

24,975
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
setuptools@58.1.0
78.1.1

Open the chart page →

4,550
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
setuptools@65.5.0
78.1.1

Open the chart page →

3,660
seleniumdoubanVerified publisher1.3.21 of 1See more

selenium douban 1.3.2

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
setuptools@45.2.0-1
45.2.0-1ubuntu0.3

Open the chart page →

11,831
tinyproxy-exporterdoubanVerified publisher0.1.21 of 1See more

tinyproxy-exporter douban 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
setuptools@57.5.0
78.1.1

Open the chart page →

3,421
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

55,988
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
setuptools@59.6.0-1.2
setuptools@59.6.0
59.6.0-1.2ubuntu0.22.04.3
78.1.1

Open the chart page →

30,759
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.19.26a8671702d6f
setuptools@58.1.0
78.1.1

Open the chart page →

13,558
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

6,914
rook-cephdtrdnk-helm-chartsVerified publisher0.0.11 of 2See more

rook-ceph dtrdnk-helm-charts 0.0.1

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
rook/ceph:v1.19.2944a1dd70496
setuptools@69.2.0
78.1.1

Open the chart page →

1,990
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.22.4258958fe2ff2
setuptools@67.7.2
78.1.1

Open the chart page →

20,204
pgdump-to-s3duck-helm0.1.41 of 1See more

pgdump-to-s3 duck-helm 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/ducksify/pgdump-to-s3:latestc42c0946bd0f
setuptools@52.0.0-4
52.0.0-4+deb11u2

Open the chart page →

1,362
amundsenduyet1.1.03 of 7See more

amundsen duyet 1.1.0

3 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
setuptools@46.1.3
78.1.1
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
setuptools@49.6.0
78.1.1
amundsendev/amundsen-search:2.4.099dda9502c3e
setuptools@49.6.0
78.1.1

Open the chart page →

11,174
grafana-dashboardsdysnixVerified publisher0.2.21 of 2See more

grafana-dashboards dysnix 0.2.2

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.10.718feb3906286
setuptools@53.0.0
78.1.1

Open the chart page →

5,161
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
dysnix/pritunl:v1.29-r819951e3e7a32
setuptools@42.0.0
78.1.1

Open the chart page →

5,055
hlo-allocatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-allocator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
eclipseaerios/hlo-allocator:v3.0.03cc1d94cfe96
setuptools@75.0.0
78.1.1

Open the chart page →

1,512
hlo-data-aggregatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-data-aggregator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
eclipseaerios/hlo-data-aggregator:v3.0.0b433c2b9f5dc
setuptools@75.0.0
78.1.1

Open the chart page →

1,655
hlo-deployment-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-deployment-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
eclipseaerios/hlo-deployment-engine:v3.0.0d582d39208c7
setuptools@75.0.0
78.1.1

Open the chart page →

1,665
hlo-fe-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-fe-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
eclipseaerios/hlo-fe-engine:v3.0.08ed2df4ca692
setuptools@75.0.0
78.1.1

Open the chart page →

1,655
mintakaeclipse-aeriosVerified publisher1.0.01 of 2See more

mintaka eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
fiware/mintaka:0.7.092a3c5cf43c0
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

11,482
orion-ldeclipse-aeriosVerified publisher1.0.01 of 2See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
fiware/orion-ld:1.10.03c490a746f65
setuptools@39.2.0
78.1.1

Open the chart page →

9,805
egeria-baseegeria-charts4.3.01 of 5See more

egeria-base egeria-charts 4.3.0

1 of the 5 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
setuptools@39.2.0
python-setuptools@39.2.0-7.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

4,046
egeria-ctsegeria-charts4.3.01 of 3See more

egeria-cts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
setuptools@39.2.0
python-setuptools@39.2.0-7.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

4,033
egeria-ptsegeria-charts4.3.01 of 3See more

egeria-pts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
setuptools@39.2.0
python-setuptools@39.2.0-7.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

4,033
odpi-egeria-labegeria-charts4.3.01 of 4See more

odpi-egeria-lab egeria-charts 4.3.0

1 of the 4 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
setuptools@39.2.0
python-setuptools@39.2.0-7.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

4,033
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.3
78.1.1

Open the chart page →

25,239
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

27,667
eoloplannereoloplannerVerified publisher0.1.01 of 7See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

32,336
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

27,667
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

28,539
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

27,667
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

27,812
servereoloserverVerified publisher0.1.01 of 7See more

server eoloserver 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

32,336
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
setuptools@45.2.0-1ubuntu0.1
setuptools@45.2.0
45.2.0-1ubuntu0.3
78.1.1

Open the chart page →

9,383
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.25.2cb4c638ffb1f
setuptools@68.2.2
78.1.1

Open the chart page →

7,366
escvmschedulerescvmscheduler1.0.72 of 3See more

escvmscheduler escvmscheduler 1.0.7

2 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
78.1.1
swisscomcloud/esc-vm-scheduler-web:latestb6639d1a922e
setuptools@65.5.0
78.1.1

Open the chart page →

4,678
nist-data-mirroreugen0.1.21 of 1See more

nist-data-mirror eugen 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/eugenmayer/nist-data-mirror:0.1.1a2162df94729
setuptools@65.6.0
78.1.1

Open the chart page →

1,958
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
setuptools@45.2.0-1
45.2.0-1ubuntu0.3

Open the chart page →

20,987
argocd-version-exporterevilmartians0.0.11 of 1See more

argocd-version-exporter evilmartians 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/evl.ms/argocd-exporter:0.0.136ea8f34aa6b
setuptools@57.5.0
78.1.1

Open the chart page →

2,401
extended-ceph-exporterextended-ceph-exporterVerified publisher1.10.01 of 2See more

extended-ceph-exporter extended-ceph-exporter 1.10.0

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/ceph/ceph:v21.1.05ff3692d2f3f
setuptools@69.0.3
78.1.1

Open the chart page →

2,897
perliteextrim-helm-chartsVerified publisher0.1.01 of 1See more

perlite extrim-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
extrim/perlite:1.5.99cb7eb5598b6
setuptools@70.3.0
78.1.1

Open the chart page →

1,439
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
setuptools@58.1.0
78.1.1

Open the chart page →

4,085

Container images carrying it

1,156 by charts deploying them

A fixed version is listed for 18 of the 19 affected packages.

Container imageDigestPackageFixed inUsed by
zohardocker12/weather_app_flask:latestb86d60dbb68d
setuptools@57.0.0
78.1.1
1
zurdi15/romm:2.3.12db88fe44c89
setuptools@65.5.0
78.1.1
1
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
setuptools@65.5.1
78.1.1
1
gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3360130ab5850
setuptools@54.1.1
78.1.1
1
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
setuptools@54.1.1
78.1.1
1
gcr.io/kubecost1/kubecost-modeling:v0.1.24a2259b098b13
setuptools@75.8.2
78.1.1
1
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
setuptools@75.6.0
python-setuptools@53.0.0-13.el9
78.1.1
0:53.0.0-13.el9_6.1
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
setuptools@57.5.0
78.1.1
1
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
setuptools@57.5.0
78.1.1
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
setuptools@65.5.1
78.1.1
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
setuptools@57.5.0
78.1.1
1
ghcr.io/appuio/maxscale-docker:6.4.613a01be102b0
setuptools@39.2.0
python-setuptools@39.2.0-6.el8_7.1
78.1.1
0:39.2.0-9.el8_10
1
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
setuptools@59.4.0
78.1.1
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
setuptools@66.1.1-1+deb12u1
setuptools@66.1.1
66.1.1-1+deb12u2
78.1.1
1
ghcr.io/aws-exporters/prometheus-ecr-exporter:0.1.442b0c87470d6
setuptools@52.0.0
78.1.1
1
ghcr.io/aws-exporters/prometheus-inspector-exporter:0.0.29c7c11293b3c
setuptools@52.0.0
78.1.1
1
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
setuptools@69.0.2
78.1.1
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
setuptools@59.6.0-1.2ubuntu0.22.04.2
59.6.0-1.2ubuntu0.22.04.3
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
py3-pip@25.2-r0
no fix listed
1
ghcr.io/b-it-projects-gmbh/nvme_exporter:lateste70307b193c6
setuptools@58.1.0
78.1.1
1
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
setuptools@52.0.0
setuptools@52.0.0-4
78.1.1
52.0.0-4+deb11u2
1
ghcr.io/blakeblackshear/frigate:0.13.07a5244e4c8dc
setuptools@52.0.0
setuptools@52.0.0-4
78.1.1
52.0.0-4+deb11u2
1
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
setuptools@52.0.0
setuptools@52.0.0-4
78.1.1
52.0.0-4+deb11u2
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
setuptools@45.2.0-1ubuntu0.1
45.2.0-1ubuntu0.3
1
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
setuptools@68.1.2
78.1.1
1
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
setuptools@68.1.2
78.1.1
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
setuptools@68.1.2
78.1.1
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
setuptools@66.1.1
78.1.1
1
ghcr.io/cloudnative-pg/postgresql:18899d3ed526b6
setuptools@52.0.0
78.1.1
1
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
setuptools@52.0.0
setuptools@52.0.0-4
78.1.1
52.0.0-4+deb11u2
1
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
setuptools@47.0.0
78.1.1
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
setuptools@39.2.0
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
78.1.1
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-9.el8_10
0:1.25.10-3.module+el8.4.0+9822+20bf1249
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
setuptools@39.2.0
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
78.1.1
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-9.el8_10
0:1.25.10-3.module+el8.4.0+9822+20bf1249
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
setuptools@39.2.0
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
78.1.1
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-9.el8_10
0:1.25.10-3.module+el8.4.0+9822+20bf1249
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
setuptools@39.2.0
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
78.1.1
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-9.el8_10
0:1.25.10-3.module+el8.4.0+9822+20bf1249
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
setuptools@39.2.0
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
78.1.1
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-9.el8_10
0:1.25.10-3.module+el8.4.0+9822+20bf1249
1
ghcr.io/cunningpike/fediblockhole:0.4.22abc5f0350dc
setuptools@65.5.1
78.1.1
1
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
setuptools@70.3.0
78.1.1
1
ghcr.io/dask/dask:2024.1.0080150de7d86
setuptools@68.1.2
78.1.1
1
ghcr.io/dask/dask-gateway-server:2024.1.0881e7acfc5a0
setuptools@65.5.1
78.1.1
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
setuptools@69.0.3
78.1.1
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
setuptools@70.3.0
setuptools@70.3.0
78.1.1
78.1.1
1
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
setuptools@70.3.0
78.1.1
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
setuptools@70.3.0
78.1.1
1
ghcr.io/dgtlmoon/changedetection.io:0.39.4f1ce4c56ccaa
setuptools@57.5.0
78.1.1
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
setuptools@68.1.2-2ubuntu1.1
setuptools@68.1.2
68.1.2-2ubuntu1.2
78.1.1
1
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
setuptools@58.1.0
78.1.1
1
ghcr.io/dodevops/azure-app-exporter/azure-app-exporter:0.1.38b472877847f5
setuptools@58.1.0
78.1.1
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
setuptools@65.5.1
78.1.1
1
ghcr.io/ducksify/pgdump-to-s3:latestc42c0946bd0f
setuptools@52.0.0-4
52.0.0-4+deb11u2
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.