StackRadar

CVE-2025-47273

High

Advisory

Published 17 May 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.015
73rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,086
of 17,787 indexed, latest versions
Container images
1,156
deployed by those charts
Fix available
18 of 19
affected packages

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

Carried by container images the latest versions of 1,086 of 17,787 indexed charts deploy, on 1,156 images.

Affected packageAffected versionsFixed inImages
setuptoolspypi0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+124 more78.1.11,083
setuptoolsdeb45.2.0-1, 45.2.0-1ubuntu0.1, 45.2.0-1ubuntu0.2, 52.0.0-4+8 more45.2.0-1ubuntu0.3, 52.0.0-4+deb11u2, 59.6.0-1.2ubuntu0.22.04.3, 66.1.1-1+deb12u2+1 more154
python-setuptoolsdeb3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more3.3-1ubuntu2+esm3, 20.7.0-1ubuntu0.1~esm3, 39.0.1-2ubuntu0.1+esm2, 44.0.0-2ubuntu0.1+esm239
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+5 more8.1.1-2ubuntu0.6+esm12, 9.0.1-2.3~ubuntu1.18.04.8+esm830
py3-pipapk25.0.1-r0, 25.2-r0, 26.0.1-r1no fix listed3
setuptoolsbitnami70.3.078.1.12
python-setuptoolsrpm0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+6 more0:0.9.8-7.el7_9.2, 0:39.2.0-9.el8_10, 0:53.0.0-13.el9_6.1138
python-chardetrpm3.0.4-7.el80:3.0.4-19.module+el8.4.0+9822+20bf124920
python-idnarpm2.5-5.el80:2.10-3.module+el8.4.0+9822+20bf124920
python-pysocksrpm1.6.8-3.el80:1.7.1-4.module+el8.4.0+9822+20bf124920
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_80:2.25.0-2.module+el8.4.0+9822+20bf124920
python-urllib3rpm1.24.2-5.el8, 1.24.2-5.el8_6.10:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be120
python3x-setuptoolsrpm41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+548604230:50.3.2-3.module+el8.4.0+23445+8885b4ac.3, 0:50.3.2-7.module+el8.8.0+23471+79c1a0709
python-plyrpm3.9-9.el80:3.11-10.module+el8.4.0+9822+20bf12497
python39rpm3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.10:3.9.2-2.module+el8.4.0+22379+dcc60181.4, 0:3.9.16-1.module+el8.8.0+22374+62aa8e74.46
python3x-piprpm19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf12490:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c4884
python3.11-setuptoolsrpm65.5.1-2.el9, 65.5.1-2.el9_4.10:65.5.1-4.el9_62
python-wheelrpm0.33.6-5.module+el8.4.0+8888+89bc7e791:0.35.1-3.module+el8.4.0+15042+dc5a279b.11
python-3.11deb3.11.15+e43.11.16+e21
OSV records
BIT-setuptools-2025-47273CGA-6rww-wjff-6g99CGA-gfc8-q7jm-4w3vDEBIAN-CVE-2025-47273PYSEC-2025-49RHSA-2025:10407RHSA-2025:11036RHSA-2025:11984RHSA-2025:13578RHSA-2025:15408RHSA-2025:15410RHSA-2025:15411RLSA-2025:10407RLSA-2025:11036UBUNTU-CVE-2025-47273DLA-4183-1ECHO-2d75-a206-3684USN-7544-1
Also known as
CGA-wrp2-2xv2-hfvv, CGA-xqm6-7hq3-gpvg, GHSA-5rjg-fvgr-3xxf, RHSA-2025:11424, RHSA-2025:11425, RHSA-2025:11426, RHSA-2025:11427, RHSA-2025:11868, RHSA-2025:12020, RHSA-2025:13669, USN-8010-1

Charts affected

1,086 by stars
ChartLatestAffected imagesRadar Score
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
moreillon/face-recognition-fastapi:x86bacb2ddd8394
setuptools@57.5.0
78.1.1

Open the chart page →

8,556
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.3
78.1.1

Open the chart page →

25,989
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.3
78.1.1

Open the chart page →

15,731
mozalert-controllermozilla0.4.01 of 1See more

mozalert-controller mozilla 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
afrank/mozalert-controller:latestd463c37b08d7
setuptools@49.2.0
78.1.1

Open the chart page →

2,969
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
setuptools@69.5.1
78.1.1

Open the chart page →

4,560
mtlsmtls0.3.41 of 1See more

mtls mtls 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
drgrove/mtls-server:v0.14.2361721759a2b
setuptools@41.0.1
78.1.1

Open the chart page →

1,458
mum-discord-botmum-discord-botVerified publisher0.3.71 of 1See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
setuptools@65.5.1
78.1.1

Open the chart page →

13,711
my-app-namemy-app-name0.0.21 of 1See more

my-app-name my-app-name 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

9,149
my-fastapi-chartmy-fastapi-template0.1.01 of 1See more

my-fastapi-chart my-fastapi-template 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
john19968010/fastapi-template:latest31a90f6bd69c
setuptools@65.5.1
78.1.1

Open the chart page →

967
testwebappmy-helm-chartsVerified publisher0.1.11 of 1See more

testwebapp my-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
forchaladtest/testwebapp:0.15909cf64ef53
setuptools@44.1.0
78.1.1

Open the chart page →

1,166
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

27,812
phonebook-chartmy-phonebook-chart0.1.03 of 3See more

phonebook-chart my-phonebook-chart 0.1.0

3 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ahmetgrbzz/result_server:1.008e10f9c0f53
setuptools@69.2.0
78.1.1
ahmetgrbzz/web_server:1.02e7fef69c29f
setuptools@69.2.0
78.1.1
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
78.1.1

Open the chart page →

3,032
betydbncsaVerified publisher0.6.11 of 4See more

betydb ncsa 0.6.1

1 of the 4 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ncsa/checks:1.0.1cc46a03e16ed
setuptools@57.5.0
78.1.1

Open the chart page →

9,542
datawolfncsaVerified publisher1.1.01 of 3See more

datawolf ncsa 1.1.0

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ncsa/checks:1.0.1cc46a03e16ed
setuptools@57.5.0
78.1.1

Open the chart page →

4,989
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
elastichq/elasticsearch-hq:latestbb3bd22c2b87
setuptools@40.7.1
78.1.1

Open the chart page →

4,913
incorencsaVerified publisher1.38.02 of 29See more

incore ncsa 1.38.0

2 of the 29 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ncsa/checks:1.0.0abf6300b57b7
setuptools@49.2.1
78.1.1
ncsa/checks:1.0.1cc46a03e16ed
setuptools@57.5.0
78.1.1

Open the chart page →

15,408
mlflowncsaVerified publisher1.2.11 of 4See more

mlflow ncsa 1.2.1

1 of the 4 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
evk02/mlflow:2.2.1ef6ff257ef35
setuptools@57.5.0
78.1.1

Open the chart page →

5,456
pecanncsaVerified publisher0.6.22 of 15See more

pecan ncsa 0.6.2

2 of the 15 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ncsa/checks:1.0.1cc46a03e16ed
setuptools@57.5.0
78.1.1
pecan/monitor:1.7.273b2074f3fec
setuptools@50.3.0
78.1.1

Open the chart page →

14,154
polyglotncsaVerified publisher0.1.12 of 18See more

polyglot ncsa 0.1.1

2 of the 18 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
setuptools@50.3.0
78.1.1
ncsa/checks:1.0.0abf6300b57b7
setuptools@49.2.1
78.1.1

Open the chart page →

55,715
smilencsaVerified publisher1.1.016 of 23See more

smile ncsa 1.1.0

16 of the 23 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
socialmediamacroscope/autophrase:0.1.570fb11d4f531
setuptools@45.2.0-1ubuntu0.1
setuptools@45.2.0
45.2.0-1ubuntu0.3
78.1.1
socialmediamacroscope/classification_predict:0.1.24fb86885d64d
setuptools@57.5.0
78.1.1
socialmediamacroscope/classification_split:0.1.24bfda60829fe
setuptools@57.5.0
78.1.1
socialmediamacroscope/classification_train:0.1.207477060bba8
setuptools@57.5.0
78.1.1
socialmediamacroscope/clowder_create_collection:0.1.0c969f7677983
setuptools@57.5.0
78.1.1
socialmediamacroscope/clowder_create_dataset:0.1.09b4211832429
setuptools@57.5.0
78.1.1
socialmediamacroscope/clowder_create_space:0.1.0999f2ff2c128
setuptools@57.5.0
78.1.1
socialmediamacroscope/clowder_list:0.1.051cb17626519
setuptools@57.5.0
78.1.1
socialmediamacroscope/clowder_upload_file:0.1.274e35f64db68
setuptools@57.5.0
78.1.1
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
python-pip@9.0.1-2.3~ubuntu1.18.04.8
python-setuptools@39.0.1-2ubuntu0.1
setuptools@39.0.1
9.0.1-2.3~ubuntu1.18.04.8+esm8
39.0.1-2ubuntu0.1+esm2
78.1.1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
setuptools@57.5.0
78.1.1
socialmediamacroscope/image_crawler:0.1.2f508216be63c
python-pip@9.0.1-2.3~ubuntu1.18.04.8
python-setuptools@39.0.1-2ubuntu0.1
setuptools@39.0.1
9.0.1-2.3~ubuntu1.18.04.8+esm8
39.0.1-2ubuntu0.1+esm2
78.1.1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
setuptools@57.5.0
78.1.1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
setuptools@57.5.0
78.1.1
socialmediamacroscope/screen_name_prompt:0.1.2724f3f5702e0
setuptools@57.5.0
78.1.1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
setuptools@57.5.0
78.1.1

Open the chart page →

109,485
netbirdnetbird1.9.01 of 4See more

netbird netbird 1.9.0

1 of the 4 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
netbirdio/dashboard:v2.13.188b5fb704a8c
setuptools@52.0.0
78.1.1

Open the chart page →

6,367
neuralbank-stackneuralbank-stack0.1.01 of 4See more

neuralbank-stack neuralbank-stack 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuralbank-frontend:latest5f4572ef6d6f
setuptools@53.0.0
78.1.1

Open the chart page →

5,198
neurofaceneurofaceVerified publisher1.4.22 of 3See more

neuroface neuroface 1.4.2

2 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuroface-backend:v1.4.13194d46df0f9
setuptools@53.0.0
78.1.1
quay.io/maximilianopizarro/neuroface-frontend:v1.4.1841b70cd1424
setuptools@53.0.0
78.1.1

Open the chart page →

7,413
nfl-walletnfl-walletVerified publisher0.1.31 of 4See more

nfl-wallet nfl-wallet 0.1.3

1 of the 4 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/nfl-wallet-webapp:1.0.13fead5702be7
setuptools@39.2.0
78.1.1

Open the chart page →

13,047
librenmsnimbolus0.5.11 of 3See more

librenms nimbolus 0.5.1

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
librenms/librenms:24.11.00920bc9117a8
setuptools@75.6.0
78.1.1

Open the chart page →

2,292
node-debug-dashboardnode-debug-dashboardVerified publisher0.3.21 of 1See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
setuptools@66.1.1
78.1.1

Open the chart page →

6,861
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.3
78.1.1

Open the chart page →

22,713
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
python-setuptools@3.3-1ubuntu1
3.3-1ubuntu2+esm3

Open the chart page →

41,455
notification-componentnotification-component1.0.01 of 4See more

notification-component notification-component 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
setuptools@47.0.0
78.1.1

Open the chart page →

7,527
nexus2novum-rgi-charts0.1.11 of 1See more

nexus2 novum-rgi-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
sonatype/nexus:oss6bc88b51d4d7
setuptools@0.9.8
python-setuptools@0.9.8-7.el7
78.1.1
0:0.9.8-7.el7_9.2

Open the chart page →

3,219
nfs-server-provisionernovum-rgi-charts1.1.21 of 1See more

nfs-server-provisioner novum-rgi-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
setuptools@40.8.0
78.1.1

Open the chart page →

2,806
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
python-pip@9.0.1-2.3~ubuntu1.18.04.1
python-setuptools@39.0.1-2
setuptools@44.0.0
9.0.1-2.3~ubuntu1.18.04.8+esm8
39.0.1-2ubuntu0.1+esm2
78.1.1

Open the chart page →

27,667
object-clonerobject-clonerVerified publisher2.0.01 of 1See more

object-cloner object-cloner 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/ideamixes/object-cloner:2.0.031030fd2f192
setuptools@65.5.1
78.1.1

Open the chart page →

1,587
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
setuptools@70.3.0
78.1.1

Open the chart page →

5,825
kuttleokgoloveVerified publisher2.0.01 of 1See more

kuttle okgolove 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
library/python:3.7-alpinef3d31c8677d0
setuptools@57.5.0
78.1.1

Open the chart page →

797
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
setuptools@59.6.0-1.2ubuntu0.22.04.1
setuptools@59.6.0
59.6.0-1.2ubuntu0.22.04.3
78.1.1

Open the chart page →

9,059
apicurioone-acre-fundVerified publisher2.3.03 of 5See more

apicurio one-acre-fund 2.3.0

3 of the 5 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
setuptools@39.2.0
python-setuptools@39.2.0-7.el8
78.1.1
0:39.2.0-9.el8_10
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
setuptools@39.2.0
python-setuptools@39.2.0-7.el8
78.1.1
0:39.2.0-9.el8_10
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
setuptools@39.2.0
python-setuptools@39.2.0-7.el8
78.1.1
0:39.2.0-9.el8_10

Open the chart page →

18,666
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
vespaengine/vespa:8.526.1569b160f58211
setuptools@39.2.0
78.1.1

Open the chart page →

6,252
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
setuptools@41.6.0
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-2.1.el8_1
python-setuptools@39.2.0-6.el8
python-urllib3@1.24.2-5.el8
python-wheel@0.33.6-5.module+el8.4.0+8888+89bc7e79
python3x-pip@19.3.1-1.module+el8.4.0+8888+89bc7e79
python3x-setuptools@41.6.0-4.module+el8.4.0+8888+89bc7e79
78.1.1
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-9.el8_10
0:1.25.10-3.module+el8.4.0+9822+20bf1249
1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1
0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1
0:50.3.2-3.module+el8.4.0+23445+8885b4ac.3

Open the chart page →

18,023
comacopencord1.0.04 of 9See more

comac opencord 1.0.0

4 of the 9 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
setuptools@40.6.3.post20190116
78.1.1
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@39.0.1
8.1.1-2ubuntu0.6+esm12
20.7.0-1ubuntu0.1~esm3
78.1.1
omecproject/onos-progran:1.0.05715e5648aa0
python-setuptools@20.7.0-1
20.7.0-1ubuntu0.1~esm3
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@39.0.1
8.1.1-2ubuntu0.6+esm12
20.7.0-1ubuntu0.1~esm3
78.1.1

Open the chart page →

88,616
comac-platformopencord0.0.172 of 11See more

comac-platform opencord 0.0.17

2 of the 11 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
setuptools@40.6.3.post20190116
78.1.1
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@39.0.1
8.1.1-2ubuntu0.6+esm12
20.7.0-1ubuntu0.1~esm3
78.1.1

Open the chart page →

26,234
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
woojoong/wowza:latestec230db19652
python-setuptools@39.0.1-2
39.0.1-2ubuntu0.1+esm2

Open the chart page →

42,662
nem-monitoringopencord1.3.221 of 9See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.20af151f677a63
setuptools@41.0.1
78.1.1

Open the chart page →

4,612
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
omecproject/mme-exporter:paging-latestbcc5f19fd676
python-pip@9.0.1-2.3~ubuntu1.18.04.1
python-setuptools@39.0.1-2
setuptools@39.0.1
9.0.1-2.3~ubuntu1.18.04.8+esm8
39.0.1-2ubuntu0.1+esm2
78.1.1

Open the chart page →

40,795
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
python-setuptools@20.7.0-1
20.7.0-1ubuntu0.1~esm3

Open the chart page →

38,889
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@20.7.0
8.1.1-2ubuntu0.6+esm12
20.7.0-1ubuntu0.1~esm3
78.1.1

Open the chart page →

12,631
sebaopencord1.0.04 of 17See more

seba opencord 1.0.0

4 of the 17 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
voltha/voltha-cli:1.6.0c4e41e92f046
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@40.6.2
8.1.1-2ubuntu0.6+esm12
20.7.0-1ubuntu0.1~esm3
78.1.1
voltha/voltha-netconf:1.6.037f80524c207
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@20.7.0
8.1.1-2ubuntu0.6+esm12
20.7.0-1ubuntu0.1~esm3
78.1.1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@20.7.0
8.1.1-2ubuntu0.6+esm12
20.7.0-1ubuntu0.1~esm3
78.1.1
voltha/voltha-voltha:1.6.0ff596b62de59
python-pip@8.1.1-2ubuntu0.4
python-setuptools@20.7.0-1
setuptools@40.6.2
8.1.1-2ubuntu0.6+esm12
20.7.0-1ubuntu0.1~esm3
78.1.1

Open the chart page →

93,965
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
setuptools@65.5.0
78.1.1

Open the chart page →

11,003
open-pdcopen-pdc0.1.01 of 3See more

open-pdc open-pdc 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
78.1.1

Open the chart page →

3,423
open-pubopen-pub0.1.01 of 3See more

open-pub open-pub 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
78.1.1

Open the chart page →

3,423

Container images carrying it

1,156 by charts deploying them

A fixed version is listed for 18 of the 19 affected packages.

Container imageDigestPackageFixed inUsed by
apache/bookkeeper:4.14.5a7d9970c148f
setuptools@39.2.0
78.1.1
1
apache/hadoop:3af361b20bec0
setuptools@0.9.8
78.1.1
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
setuptools@59.6.0-1.2ubuntu0.22.04.1
setuptools@59.6.0
59.6.0-1.2ubuntu0.22.04.3
78.1.1
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.3
78.1.1
1
apachepulsar/pulsar:2.6.14db6ff0b4045
setuptools@40.8.0
78.1.1
1
apachepulsar/pulsar:3.0.79c9947de139d
setuptools@59.6.0-1.2ubuntu0.22.04.2
setuptools@59.6.0
59.6.0-1.2ubuntu0.22.04.3
78.1.1
1
apachepulsar/pulsar:2.9.0d056c89b7131
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.3
78.1.1
1
apachepulsar/pulsar:2.8.2d538416d5afe
setuptools@45.2.0-1
setuptools@45.2.0
45.2.0-1ubuntu0.3
78.1.1
1
apache/ranger:2.7.076c176e8a0e4
setuptools@59.6.0
78.1.1
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
setuptools@57.5.0
78.1.1
1
apache/superset:4.0.1ab9467fd712c
setuptools@58.1.0
78.1.1
1
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
setuptools@65.5.1
78.1.1
1
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
setuptools@53.0.0
78.1.1
1
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
setuptools@39.2.0
python-chardet@3.0.4-7.el8
python-idna@2.5-5.el8
python-pysocks@1.6.8-3.el8
python-requests@2.20.0-3.el8_8
python-setuptools@39.2.0-7.el8
python-urllib3@1.24.2-5.el8
78.1.1
0:3.0.4-19.module+el8.4.0+9822+20bf1249
0:2.10-3.module+el8.4.0+9822+20bf1249
0:1.7.1-4.module+el8.4.0+9822+20bf1249
0:2.25.0-2.module+el8.4.0+9822+20bf1249
0:39.2.0-9.el8_10
0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10
1
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
setuptools@39.2.0
python-setuptools@39.2.0-7.el8
78.1.1
0:39.2.0-9.el8_10
1
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
setuptools@39.2.0
python-setuptools@39.2.0-7.el8
78.1.1
0:39.2.0-9.el8_10
1
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
setuptools@39.2.0
python-setuptools@39.2.0-7.el8
78.1.1
0:39.2.0-9.el8_10
1
applariat/tx-smtp-relay:latest6bc9655d920f
setuptools@20.8.0
78.1.1
1
apsl/thumbor:6.7.051e2de5c2c70
setuptools@41.6.0
78.1.1
1
aquasec/kube-hunter:1950bf607ce9308
setuptools@40.6.2
78.1.1
1
archish27/python-fastapi-postgres:latest6610071a2101
setuptools@58.1.0
78.1.1
1
aristidetm/basic-notebook:3.6.5469dbc951224
setuptools@70.3.0
78.1.1
1
aristidetm/k8s-hub:3.3.7ccb516cb8474
setuptools@65.5.1
78.1.1
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
setuptools@74.0.0
78.1.1
1
arunvelsriram/utils:latest655ad18fd8d6
setuptools@68.1.2
78.1.1
1
asdkant/fastapi-hello-world:latesta23d8bf7c885
setuptools@51.0.0
78.1.1
1
assistiot/authorization_db:latestc3adbab6a3e7
setuptools@50.3.2
78.1.1
1
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
setuptools@0.9.8
78.1.1
1
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
setuptools@46.1.3
78.1.1
1
assistiot/cybersecurity-monitoring_ir-elk:latest4228b7a8ef40
setuptools@39.2.0
78.1.1
1
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
setuptools@39.2.0
78.1.1
1
assistiot/fl_local_operations_inference:latest0518b63a2e69
setuptools@65.5.1
78.1.1
1
assistiot/fl_repository:latest0fce3ea719a5
setuptools@47.1.1
78.1.1
1
assistiot/fl_training_collector:latest792715dd3084
setuptools@47.1.1
78.1.1
1
assistiot/identity-manager_kc:latest0df4b4fa899a
setuptools@39.2.0
python-setuptools@39.2.0-6.el8
78.1.1
0:39.2.0-9.el8_10
1
assistiot/open_api_backend:1.1.230812ba93555
setuptools@59.6.0-1.2ubuntu0.22.04.1
setuptools@69.0.2
59.6.0-1.2ubuntu0.22.04.3
78.1.1
1
assistiot/resource-provisioning_api:1.0.044a37b00d4f8
setuptools@57.5.0
78.1.1
1
assistiot/resource-provisioning_im:1.0.0a942dc14030a
setuptools@57.5.0
78.1.1
1
assistiot/resource-provisioning_prc:1.0.08b5d118bdf0e
setuptools@57.5.0
setuptools@52.0.0-4
78.1.1
52.0.0-4+deb11u2
1
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
setuptools@57.5.0
78.1.1
1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
setuptools@57.5.0
78.1.1
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
setuptools@66.1.1-1
setuptools@66.1.1
66.1.1-1+deb12u2
78.1.1
1
assistiot/traffic-classification_api:2.0.0e32b87786142
setuptools@57.5.0
78.1.1
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
setuptools@45.2.0-1ubuntu0.1
setuptools@67.6.0
45.2.0-1ubuntu0.3
78.1.1
1
atlassian/confluence-server:7.10.03b9222ab32ef
setuptools@59.6.0-1.2
59.6.0-1.2ubuntu0.22.04.3
1
atlassian/jira-software:8.14.037bc46cbec1a
setuptools@59.6.0-1.2ubuntu0.22.04.1
59.6.0-1.2ubuntu0.22.04.3
1
avinash263/pyredis263:latestaa2b8727f1a6
setuptools@57.5.0
78.1.1
1
azhar008/flaskapplication:latesta1e827b0adea
setuptools@57.5.0
78.1.1
1
badsmoke/wunderground_exporter:0.0.5c54c004f24cc
setuptools@53.0.0
78.1.1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.