StackRadar

CVE-2025-47273

High

Advisory

Published 17 May 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.015
73rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,086
of 17,787 indexed, latest versions
Container images
1,156
deployed by those charts
Fix available
18 of 19
affected packages

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

Carried by container images the latest versions of 1,086 of 17,787 indexed charts deploy, on 1,156 images.

Affected packageAffected versionsFixed inImages
setuptoolspypi0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+124 more78.1.11,083
setuptoolsdeb45.2.0-1, 45.2.0-1ubuntu0.1, 45.2.0-1ubuntu0.2, 52.0.0-4+8 more45.2.0-1ubuntu0.3, 52.0.0-4+deb11u2, 59.6.0-1.2ubuntu0.22.04.3, 66.1.1-1+deb12u2+1 more154
python-setuptoolsdeb3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more3.3-1ubuntu2+esm3, 20.7.0-1ubuntu0.1~esm3, 39.0.1-2ubuntu0.1+esm2, 44.0.0-2ubuntu0.1+esm239
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+5 more8.1.1-2ubuntu0.6+esm12, 9.0.1-2.3~ubuntu1.18.04.8+esm830
py3-pipapk25.0.1-r0, 25.2-r0, 26.0.1-r1no fix listed3
setuptoolsbitnami70.3.078.1.12
python-setuptoolsrpm0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+6 more0:0.9.8-7.el7_9.2, 0:39.2.0-9.el8_10, 0:53.0.0-13.el9_6.1138
python-chardetrpm3.0.4-7.el80:3.0.4-19.module+el8.4.0+9822+20bf124920
python-idnarpm2.5-5.el80:2.10-3.module+el8.4.0+9822+20bf124920
python-pysocksrpm1.6.8-3.el80:1.7.1-4.module+el8.4.0+9822+20bf124920
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_80:2.25.0-2.module+el8.4.0+9822+20bf124920
python-urllib3rpm1.24.2-5.el8, 1.24.2-5.el8_6.10:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be120
python3x-setuptoolsrpm41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+548604230:50.3.2-3.module+el8.4.0+23445+8885b4ac.3, 0:50.3.2-7.module+el8.8.0+23471+79c1a0709
python-plyrpm3.9-9.el80:3.11-10.module+el8.4.0+9822+20bf12497
python39rpm3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.10:3.9.2-2.module+el8.4.0+22379+dcc60181.4, 0:3.9.16-1.module+el8.8.0+22374+62aa8e74.46
python3x-piprpm19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf12490:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c4884
python3.11-setuptoolsrpm65.5.1-2.el9, 65.5.1-2.el9_4.10:65.5.1-4.el9_62
python-wheelrpm0.33.6-5.module+el8.4.0+8888+89bc7e791:0.35.1-3.module+el8.4.0+15042+dc5a279b.11
python-3.11deb3.11.15+e43.11.16+e21
OSV records
BIT-setuptools-2025-47273CGA-6rww-wjff-6g99CGA-gfc8-q7jm-4w3vDEBIAN-CVE-2025-47273PYSEC-2025-49RHSA-2025:10407RHSA-2025:11036RHSA-2025:11984RHSA-2025:13578RHSA-2025:15408RHSA-2025:15410RHSA-2025:15411RLSA-2025:10407RLSA-2025:11036UBUNTU-CVE-2025-47273DLA-4183-1ECHO-2d75-a206-3684USN-7544-1
Also known as
CGA-wrp2-2xv2-hfvv, CGA-xqm6-7hq3-gpvg, GHSA-5rjg-fvgr-3xxf, RHSA-2025:11424, RHSA-2025:11425, RHSA-2025:11426, RHSA-2025:11427, RHSA-2025:11868, RHSA-2025:12020, RHSA-2025:13669, USN-8010-1

Charts affected

1,086 by stars
ChartLatestAffected imagesRadar Score
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
setuptools@58.1.0
78.1.1

Open the chart page →

11,372
rook-cephrookOfficialVerified publisher1.20.71 of 2See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
rook/ceph:v1.20.72f970c425617
setuptools@69.2.0
78.1.1

Open the chart page →

1,447
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

7,713
openebsopenebsOfficialVerified publisher4.6.11 of 35See more

openebs openebs 4.6.1

1 of the 35 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.30.2cdb361e67b1b
setuptools@76.0.0
78.1.1

Open the chart page →

24,009
ceph-csi-cephfsceph-csiOfficialVerified publisher3.17.11 of 6See more

ceph-csi-cephfs ceph-csi 3.17.1

1 of the 6 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
setuptools@69.2.0
78.1.1

Open the chart page →

4,061
ceph-csi-rbdceph-csiOfficialVerified publisher3.17.11 of 6See more

ceph-csi-rbd ceph-csi 3.17.1

1 of the 6 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
setuptools@69.2.0
78.1.1

Open the chart page →

4,061
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
setuptools@63.4.2
78.1.1

Open the chart page →

9,194
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.3
78.1.1

Open the chart page →

32,353
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
setuptools@66.1.1-1
setuptools@66.1.1
66.1.1-1+deb12u2
78.1.1

Open the chart page →

10,648
semaphoresemaphoreuiOfficialVerified publisher16.2.21 of 1See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.18.3e9260bfa8255
setuptools@70.3.0
78.1.1

Open the chart page →

2,221
locustdeliveryheroVerified publisher0.35.01 of 1See more

locust deliveryhero 0.35.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
setuptools@65.5.1
78.1.1

Open the chart page →

2,660
nacosygqygq2Verified publisher2.1.101 of 4See more

nacos ygqygq2 2.1.10

1 of the 4 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ygqygq2/mysql-exec-sql:latest54f30def1558
setuptools@50.3.2
78.1.1

Open the chart page →

4,984
difydoubanVerified publisher0.10.02 of 6See more

dify douban 0.10.0

2 of the 6 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
setuptools@68.1.2
78.1.1
langgenius/dify-sandbox:0.2.124e65e8a351a2
setuptools@65.5.1
78.1.1

Open the chart page →

19,497
stackgres-operatorstackgres-chartsOfficialVerified publisher1.19.12 of 2See more

stackgres-operator stackgres-charts 1.19.1

2 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/ongres/kubectl:v1.25.16-build-6.5304dada9e4503
setuptools@68.2.2
78.1.1
quay.io/stackgres/operator:1.19.1f241b0b20326
setuptools@68.2.2
78.1.1

Open the chart page →

2,138
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
setuptools@68.1.2
78.1.1

Open the chart page →

22,115
ambassadordatawire6.9.51 of 2See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
setuptools@50.3.2
78.1.1

Open the chart page →

4,086
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
setuptools@66.1.1
78.1.1

Open the chart page →

11,402
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
setuptools@59.6.0-1.2
59.6.0-1.2ubuntu0.22.04.3

Open the chart page →

33,907
emissary-ingressdatawire7.1.8-ea1 of 1See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
datawire/emissary:2.0.2-ea9716efbdd24b
setuptools@50.3.2
78.1.1

Open the chart page →

4,918
kube-downscalerdeliveryheroVerified publisher0.7.61 of 1See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
setuptools@65.5.1
78.1.1

Open the chart page →

3,700
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
setuptools@60.8.1
78.1.1

Open the chart page →

7,706
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
setuptools@67.6.0
78.1.1

Open the chart page →

6,550
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
setuptools@65.5.0
78.1.1

Open the chart page →

6,012
pypiservercommunity-chartsVerified publisher0.1.91 of 1See more

pypiserver community-charts 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
pypiserver/pypiserver:v2.4.1e935e19433ef
setuptools@65.5.1
78.1.1

Open the chart page →

583
daskdask2024.1.12 of 2See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/dask/dask:2024.1.0080150de7d86
setuptools@68.1.2
78.1.1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
setuptools@69.0.3
78.1.1

Open the chart page →

12,830
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
python-setuptools@39.0.1-2
39.0.1-2ubuntu0.1+esm2

Open the chart page →

15,607
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
setuptools@68.2.2
78.1.1

Open the chart page →

6,040
yugabyteyugabyteVerified publisher2026.1.11 of 1See more

yugabyte yugabyte 2026.1.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
yugabytedb/yugabyte:2026.1.1.1-b23926eedf0ff4
setuptools@65.5.1
78.1.1

Open the chart page →

355
edge-stackdatawire7.1.8-ea1 of 2See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
datawire/aes:2.0.3-ea07f8fe4f4f8e
setuptools@50.3.2
78.1.1

Open the chart page →

5,173
docker-mailserverdocker-mailserver0.4.01 of 2See more

docker-mailserver docker-mailserver 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
mailserver/docker-mailserver:11.0.0e0809756dc96
setuptools@52.0.0-4
52.0.0-4+deb11u2

Open the chart page →

1,382
milvusmilvus-helm5.0.281 of 4See more

milvus milvus-helm 5.0.28

1 of the 4 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
setuptools@59.6.0-1.2ubuntu0.22.04.2
setuptools@59.6.0
59.6.0-1.2ubuntu0.22.04.3
78.1.1

Open the chart page →

10,764
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
setuptools@45.2.0-1
45.2.0-1ubuntu0.3

Open the chart page →

18,570
apicurio-registryapicurio-registry-helmVerified publisher3.8.01 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
setuptools@39.2.0
python-setuptools@39.2.0-7.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

6,675
ansible-semaphorecloudhippieVerified publisher15.2.101 of 1See more

ansible-semaphore cloudhippie 15.2.10

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
setuptools@70.3.0
78.1.1

Open the chart page →

1,235
supersetcloudposse1.2.01 of 1See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
setuptools@44.0.0
78.1.1

Open the chart page →

5,851
servarrkubitodevVerified publisher1.5.21 of 10See more

servarr kubitodev 1.5.2

1 of the 10 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.3.21f104ee51e512
setuptools@65.5.1
78.1.1

Open the chart page →

3,004
memgraphmemgraphVerified publisher1.0.71 of 2See more

memgraph memgraph 1.0.7

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
memgraph/memgraph:3.13.1bd3fe13228f4
setuptools@68.1.2
78.1.1

Open the chart page →

1,208
stackstorm-hastackstormVerified publisher1.1.011 of 17See more

stackstorm-ha stackstorm 1.1.0

11 of the 17 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.3
78.1.1
stackstorm/st2api:3.86f56d239d280
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.3
78.1.1
stackstorm/st2auth:3.833ecfda16608
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.3
78.1.1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.3
78.1.1
stackstorm/st2notifier:3.8f190a6212195
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.3
78.1.1
stackstorm/st2rulesengine:3.8259503496ff9
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.3
78.1.1
stackstorm/st2scheduler:3.8b1de2055c362
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.3
78.1.1
stackstorm/st2sensorcontainer:3.8b1a338f64773
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.3
78.1.1
stackstorm/st2stream:3.81c8904a3bf67
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.3
78.1.1
stackstorm/st2timersengine:3.81bf35bfaf00c
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.3
78.1.1
stackstorm/st2workflowengine:3.819fdfffdbba8
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
45.2.0-1ubuntu0.3
78.1.1

Open the chart page →

96,984
frigateblakeblackshear7.8.01 of 1See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
setuptools@52.0.0
setuptools@52.0.0-4
78.1.1
52.0.0-4+deb11u2

Open the chart page →

3,004
kube-prometheuschoerodon9.3.11 of 7See more

kube-prometheus choerodon 9.3.1

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.1517b98eecdf6d1
setuptools@46.1.3
78.1.1

Open the chart page →

12,237
openclawopenclawVerified publisher1.91.31 of 2See more

openclaw openclaw 1.91.3

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
setuptools@68.1.2
78.1.1

Open the chart page →

3,050
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
setuptools@47.3.1
78.1.1
dbanda/spark:2.4.6d0e6367876ae
setuptools@47.3.1
78.1.1

Open the chart page →

13,736
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
setuptools@49.2.0
78.1.1

Open the chart page →

30,481
syftopenmined0.9.52 of 6See more

syft openmined 0.9.5

2 of the 6 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
openmined/syft-backend:0.9.5b72f74a68b32
setuptools@75.8.0
py3-pip@25.0.1-r0
78.1.1
no fix listed
openmined/syft-seaweedfs:0.9.53a4144c0bb82
setuptools@68.2.2
78.1.1

Open the chart page →

17,306
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
setuptools@45.2.0-1
45.2.0-1ubuntu0.3

Open the chart page →

11,831
tbmq-clustertbmq-helm-chartOfficialVerified publisher2.1.01 of 3See more

tbmq-cluster tbmq-helm-chart 2.1.0

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
thingsboard/toolbox:1.13.01bd61a0da6d3
setuptools@70.3.0
78.1.1

Open the chart page →

3,555
barmanadfinisVerified publisher0.10.01 of 1See more

barman adfinis 0.10.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ubcctlt/barman:v2.19cbbbbc8ae16b
setuptools@61.2.0
78.1.1

Open the chart page →

1,552
zabbix-serveraekondratievVerified publisher1.0.61 of 4See more

zabbix-server aekondratiev 1.0.6

1 of the 4 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
setuptools@45.2.0-1
45.2.0-1ubuntu0.3

Open the chart page →

30,811
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
setuptools@66.1.1-1+deb12u1
setuptools@66.1.1
66.1.1-1+deb12u2
78.1.1

Open the chart page →

6,484
awx-operatorawx-operator-helm3.2.11 of 2See more

awx-operator awx-operator-helm 3.2.1

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
setuptools@39.2.0
python-setuptools@39.2.0-7.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

9,868

Container images carrying it

1,156 by charts deploying them

A fixed version is listed for 18 of the 19 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
setuptools@51.0.0
78.1.1
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
setuptools@57.5.0
78.1.1
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
setuptools@57.5.0
78.1.1
1
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
setuptools@69.0.2
78.1.1
1
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
setuptools@69.0.3
78.1.1
1
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
setuptools@53.0.0
78.1.1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.