StackRadar

CVE-2025-47273

High

Advisory

Published 17 May 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.015
73rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,086
of 17,787 indexed, latest versions
Container images
1,156
deployed by those charts
Fix available
18 of 19
affected packages

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

Carried by container images the latest versions of 1,086 of 17,787 indexed charts deploy, on 1,156 images.

Affected packageAffected versionsFixed inImages
setuptoolspypi0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+124 more78.1.11,083
setuptoolsdeb45.2.0-1, 45.2.0-1ubuntu0.1, 45.2.0-1ubuntu0.2, 52.0.0-4+8 more45.2.0-1ubuntu0.3, 52.0.0-4+deb11u2, 59.6.0-1.2ubuntu0.22.04.3, 66.1.1-1+deb12u2+1 more154
python-setuptoolsdeb3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more3.3-1ubuntu2+esm3, 20.7.0-1ubuntu0.1~esm3, 39.0.1-2ubuntu0.1+esm2, 44.0.0-2ubuntu0.1+esm239
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+5 more8.1.1-2ubuntu0.6+esm12, 9.0.1-2.3~ubuntu1.18.04.8+esm830
py3-pipapk25.0.1-r0, 25.2-r0, 26.0.1-r1no fix listed3
setuptoolsbitnami70.3.078.1.12
python-setuptoolsrpm0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+6 more0:0.9.8-7.el7_9.2, 0:39.2.0-9.el8_10, 0:53.0.0-13.el9_6.1138
python-chardetrpm3.0.4-7.el80:3.0.4-19.module+el8.4.0+9822+20bf124920
python-idnarpm2.5-5.el80:2.10-3.module+el8.4.0+9822+20bf124920
python-pysocksrpm1.6.8-3.el80:1.7.1-4.module+el8.4.0+9822+20bf124920
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_80:2.25.0-2.module+el8.4.0+9822+20bf124920
python-urllib3rpm1.24.2-5.el8, 1.24.2-5.el8_6.10:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be120
python3x-setuptoolsrpm41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+548604230:50.3.2-3.module+el8.4.0+23445+8885b4ac.3, 0:50.3.2-7.module+el8.8.0+23471+79c1a0709
python-plyrpm3.9-9.el80:3.11-10.module+el8.4.0+9822+20bf12497
python39rpm3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.10:3.9.2-2.module+el8.4.0+22379+dcc60181.4, 0:3.9.16-1.module+el8.8.0+22374+62aa8e74.46
python3x-piprpm19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf12490:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c4884
python3.11-setuptoolsrpm65.5.1-2.el9, 65.5.1-2.el9_4.10:65.5.1-4.el9_62
python-wheelrpm0.33.6-5.module+el8.4.0+8888+89bc7e791:0.35.1-3.module+el8.4.0+15042+dc5a279b.11
python-3.11deb3.11.15+e43.11.16+e21
OSV records
BIT-setuptools-2025-47273CGA-6rww-wjff-6g99CGA-gfc8-q7jm-4w3vDEBIAN-CVE-2025-47273PYSEC-2025-49RHSA-2025:10407RHSA-2025:11036RHSA-2025:11984RHSA-2025:13578RHSA-2025:15408RHSA-2025:15410RHSA-2025:15411RLSA-2025:10407RLSA-2025:11036UBUNTU-CVE-2025-47273DLA-4183-1ECHO-2d75-a206-3684USN-7544-1
Also known as
CGA-wrp2-2xv2-hfvv, CGA-xqm6-7hq3-gpvg, GHSA-5rjg-fvgr-3xxf, RHSA-2025:11424, RHSA-2025:11425, RHSA-2025:11426, RHSA-2025:11427, RHSA-2025:11868, RHSA-2025:12020, RHSA-2025:13669, USN-8010-1

Charts affected

1,086 by stars
ChartLatestAffected imagesRadar Score
ekorrecamptocamp30.1.11 of 1See more

ekorre camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
camptocamp/ekorre:0.1.035c91d5fda04
setuptools@45.1.0
78.1.1

Open the chart page →

3,891
pghoardcamptocamp35.8.11 of 1See more

pghoard camptocamp3 5.8.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
camptocamp/pghoard:10bff736b15623
setuptools@33.1.1
78.1.1

Open the chart page →

2,813
prometheus-operatorcamptocamp35.15.11 of 5See more

prometheus-operator camptocamp3 5.15.1

1 of the 5 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
setuptools@40.8.0
78.1.1

Open the chart page →

2,490
snow-webhookcamptocamp31.0.01 of 1See more

snow-webhook camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
camptocamp/snow-webhook:latest2924b43dbf40
setuptools@40.8.0
78.1.1

Open the chart page →

1,310
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.26.237e2e33dbd7b
setuptools@65.5.0
78.1.1

Open the chart page →

16,197
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
setuptools@76.0.0
78.1.1

Open the chart page →

14,865
tsoragecetic0.4.111 of 8See more

tsorage cetic 0.4.11

1 of the 8 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:5.0.1c87b1c07fb53
setuptools@40.5.0
78.1.1

Open the chart page →

12,018
pypi-servercgsimmons0.1.01 of 1See more

pypi-server cgsimmons 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
pypiserver/pypiserver:v1.3.2303ac89b2aa2
setuptools@44.0.0
78.1.1

Open the chart page →

506
ctk-walkthroughchaostoolkit-walkthrough0.1.03 of 3See more

ctk-walkthrough chaostoolkit-walkthrough 0.1.0

3 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
chaostoolkit/back:latest734f3af86125
setuptools@50.3.2
78.1.1
chaostoolkit/front:latest7f4a7eb9f7df
setuptools@50.3.2
78.1.1
chaostoolkit/middle:latestb95ba4961cfc
setuptools@50.3.2
78.1.1

Open the chart page →

5,557
otbrcharts-derwitt-devVerified publisher0.2.01 of 1See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
openthread/otbr:latestf307f59f6432
python-setuptools@39.0.1-2ubuntu0.1
39.0.1-2ubuntu0.1+esm2

Open the chart page →

12,804
chat-searchchat-searchVerified publisher0.1.71 of 1See more

chat-search chat-search 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/hemslo/chat-search:latest39d48995a5bd
setuptools@65.5.1
78.1.1

Open the chart page →

4,048
opensipschetan-opensips0.1.01 of 1See more

opensips chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
chetangautamm/repo:Opensips_Buildb4b94155ff5a
python-setuptools@3.3-1ubuntu2
3.3-1ubuntu2+esm3

Open the chart page →

30,163
sippchetan-opensips0.1.01 of 1See more

sipp chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
chetangautamm/repo:sipp.v3e7f7049e1544
setuptools@45.2.0-1
45.2.0-1ubuntu0.3

Open the chart page →

12,531
countlychristianhuthVerified publisher5.2.12 of 3See more

countly christianhuth 5.2.1

2 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
countly/api:25.05.4f4cc7447c4f5
setuptools@56.0.0
78.1.1
countly/frontend:25.05.42acbc11499b6
setuptools@56.0.0
78.1.1

Open the chart page →

7,295
keycloak-mcp-serverchristianhuthVerified publisher1.2.01 of 1See more

keycloak-mcp-server christianhuth 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/sshaaf/keycloak-mcp-server:0.4.0b7e9cba72f8a
python-setuptools@53.0.0-13.el9
0:53.0.0-13.el9_6.1

Open the chart page →

1,440
kube-ops-viewchristianhuthVerified publisher8.3.31 of 1See more

kube-ops-view christianhuth 8.3.3

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:23.5.0a4fae38f93d7
setuptools@65.5.1
78.1.1

Open the chart page →

1,227
polrchristianhuthVerified publisher4.3.01 of 2See more

polr christianhuth 4.3.0

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ajanvier/polr:2.3.091ac61b88c85
setuptools@51.3.3
78.1.1

Open the chart page →

5,936
syncserverchristianhuthVerified publisher1.3.01 of 1See more

syncserver christianhuth 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
mozilla/syncserver:latest016162bf39d8
setuptools@44.1.0
78.1.1

Open the chart page →

1,382
basechronicleVerified publisher0.0.81 of 1See more

base chronicle 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
setuptools@59.6.0-1.2ubuntu0.22.04.2
59.6.0-1.2ubuntu0.22.04.3

Open the chart page →

4,858
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
setuptools@59.6.0-1.2ubuntu0.22.04.2
setuptools@75.8.0
59.6.0-1.2ubuntu0.22.04.3
78.1.1

Open the chart page →

20,936
check-mkcloudnativeapp0.2.11 of 1See more

check-mk cloudnativeapp 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
nlmacamp/check_mk:latest5dbb8589f824
setuptools@40.6.2
78.1.1

Open the chart page →

2,408
couchdbcloudnativeapp1.1.31 of 3See more

couchdb cloudnativeapp 1.1.3

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
kocolosk/couchdb-statefulset-assembler:1.2.06effb982154e
setuptools@38.2.3
78.1.1

Open the chart page →

2,110
daskcloudnativeapp2.2.12 of 2See more

dask cloudnativeapp 2.2.1

2 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
daskdev/dask:1.1.04ecd7bc35500
setuptools@40.2.0
78.1.1
daskdev/dask-notebook:1.1.0052630f5ca04
setuptools@40.6.3
78.1.1

Open the chart page →

29,922
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
setuptools@38.5.1
78.1.1

Open the chart page →

36,132
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
python-setuptools@20.7.0-1
20.7.0-1ubuntu0.1~esm3

Open the chart page →

27,434
k8s-spot-termination-handlercloudnativeapp1.2.11 of 1See more

k8s-spot-termination-handler cloudnativeapp 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
kubeaws/kube-spot-termination-notice-handler:1.13.0-1c9cd2ba4373a
setuptools@40.8.0
78.1.1

Open the chart page →

2,095
kube-huntercloudnativeapp1.0.21 of 1See more

kube-hunter cloudnativeapp 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
aquasec/kube-hunter:1950bf607ce9308
setuptools@40.6.2
78.1.1

Open the chart page →

1,305
locustcloudnativeapp1.0.01 of 1See more

locust cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
greenbirdit/locust:0.9.0e99d53bdc944
setuptools@40.6.3
78.1.1

Open the chart page →

1,352
prometheus-operatorcloudnativeapp6.4.01 of 7See more

prometheus-operator cloudnativeapp 6.4.0

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.186eb52513d59e
setuptools@41.0.1
78.1.1

Open the chart page →

2,954
seleniumcloudnativeapp1.0.81 of 1See more

selenium cloudnativeapp 1.0.8

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
setuptools@45.2.0-1
45.2.0-1ubuntu0.3

Open the chart page →

11,831
sentry-kubernetescloudnativeapp0.2.01 of 1See more

sentry-kubernetes cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
getsentry/sentry-kubernetes:latest6ac37974fd2a
setuptools@40.8.0
78.1.1

Open the chart page →

1,415
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
setuptools@40.8.0
78.1.1

Open the chart page →

5,060
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@20.7.0
8.1.1-2ubuntu0.6+esm12
20.7.0-1ubuntu0.1~esm3
78.1.1

Open the chart page →

77,798
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
setuptools@39.2.0
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-ply@3.9-9.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-7.el8
python-urllib3@1.24.2-5.el8
python3x-pip@19.3.1-6.module+el8.7.0+15823+8950cfa7
python3x-setuptools@41.6.0-5.module+el8.5.0+12205+a865257a
78.1.1
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:3.11-10.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-9.el8_10
0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
0:20.2.4-7.module+el8.6.0+13003+6bb2c488
0:50.3.2-7.module+el8.8.0+23471+79c1a070

Open the chart page →

25,152
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
setuptools@39.2.0
python-setuptools@39.2.0-5.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

25,454
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
setuptools@51.3.3
78.1.1

Open the chart page →

6,696
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
setuptools@59.4.0
78.1.1

Open the chart page →

6,921
robot-shopcloud-native-toolkit1.1.11 of 12See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
robotshop/rs-payment:latest774b52c6180d
setuptools@57.4.0
78.1.1

Open the chart page →

29,594
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.3
78.1.1

Open the chart page →

12,505
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.3
78.1.1

Open the chart page →

12,176
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.3
78.1.1

Open the chart page →

11,640
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.3
78.1.1

Open the chart page →

16,117
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
python-pip@1.5.4-1ubuntu4
python-setuptools@3.3-1ubuntu2
setuptools@36.5.0.post20170921
no fix listed
3.3-1ubuntu2+esm3
78.1.1
galaxy/galaxy-stable:v18.018e577a626dfd
python-pip@1.5.4-1ubuntu4
python-setuptools@3.3-1ubuntu2
setuptools@39.2.0
no fix listed
3.3-1ubuntu2+esm3
78.1.1

Open the chart page →

70,968
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
cloudve/janis-terminal:latestaf56e77ca587
python-pip@9.0.1-2.3~ubuntu1.18.04.1
python-setuptools@39.0.1-2
setuptools@39.0.1
9.0.1-2.3~ubuntu1.18.04.8+esm8
39.0.1-2ubuntu0.1+esm2
78.1.1

Open the chart page →

14,285
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
setuptools@66.1.1-1+deb12u1
setuptools@66.1.1
66.1.1-1+deb12u2
78.1.1

Open the chart page →

5,994
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
setuptools@46.4.0.post20200518
78.1.1

Open the chart page →

13,170
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
setuptools@65.5.1
78.1.1

Open the chart page →

7,521
clamapicnieg2.0.51 of 2See more

clamapi cnieg 2.0.5

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/mailu/clamav:1.9.5001d30483e4a8
setuptools@65.6.0
78.1.1

Open the chart page →

4,672
pulsarcnieg1.0.82 of 2See more

pulsar cnieg 1.0.8

2 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
setuptools@40.8.0
78.1.1
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
setuptools@40.6.3.post20190116
78.1.1

Open the chart page →

16,860
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
setuptools@68.1.2
78.1.1

Open the chart page →

13,286

Container images carrying it

1,156 by charts deploying them

A fixed version is listed for 18 of the 19 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
setuptools@51.0.0
78.1.1
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
setuptools@57.5.0
78.1.1
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
setuptools@57.5.0
78.1.1
1
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
setuptools@69.0.2
78.1.1
1
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
setuptools@69.0.3
78.1.1
1
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
setuptools@53.0.0
78.1.1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.