CVE-2025-47273

High

Advisory

Published 17 May 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.8; base score, highest
EPSS: 0.015; 73rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,071; of 17,787 indexed, latest versions
Container images: 1,143; deployed by those charts
Fix available: 18 of 19; affected packages

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

Carried by container images the latest versions of 1,071 of 17,787 indexed charts deploy, on 1,143 images.

Affected package	Affected versions	Fixed in	Images
setuptoolspypi	0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+123 more	78.1.1	1,070
setuptoolsdeb	45.2.0-1, 45.2.0-1ubuntu0.1, 45.2.0-1ubuntu0.2, 52.0.0-4+8 more	45.2.0-1ubuntu0.3, 52.0.0-4+deb11u2, 59.6.0-1.2ubuntu0.22.04.3, 66.1.1-1+deb12u2+1 more	151
python-setuptoolsdeb	3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+3 more	3.3-1ubuntu2+esm3, 20.7.0-1ubuntu0.1~esm3, 39.0.1-2ubuntu0.1+esm2, 44.0.0-2ubuntu0.1+esm2	39
python-pipdeb	1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+5 more	8.1.1-2ubuntu0.6+esm12, 9.0.1-2.3~ubuntu1.18.04.8+esm8	30
py3-pipapk	25.0.1-r0, 25.2-r0, 26.0.1-r1	no fix listed	3
setuptoolsbitnami	70.3.0	78.1.1	2
python-setuptoolsrpm	0.9.8-7.el7, 39.2.0-5.el8, 39.2.0-6.el8, 39.2.0-6.el8_7.1+6 more	0:0.9.8-7.el7_9.2, 0:39.2.0-9.el8_10, 0:53.0.0-13.el9_6.1	136
python-chardetrpm	3.0.4-7.el8	0:3.0.4-19.module+el8.4.0+9822+20bf1249	20
python-idnarpm	2.5-5.el8	0:2.10-3.module+el8.4.0+9822+20bf1249	20
python-pysocksrpm	1.6.8-3.el8	0:1.7.1-4.module+el8.4.0+9822+20bf1249	20
python-requestsrpm	2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8	0:2.25.0-2.module+el8.4.0+9822+20bf1249	20
python-urllib3rpm	1.24.2-5.el8, 1.24.2-5.el8_6.1	0:1.25.10-3.module+el8.4.0+9822+20bf1249, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1	20
python3x-setuptoolsrpm	41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249, 50.3.2-4.module+el8.5.0+12204+54860423	0:50.3.2-3.module+el8.4.0+23445+8885b4ac.3, 0:50.3.2-7.module+el8.8.0+23471+79c1a070	9
python-plyrpm	3.9-9.el8	0:3.11-10.module+el8.4.0+9822+20bf1249	7
python39rpm	3.9.2-1.module+el8.4.0+10237+bdc77aac, 3.9.16-1.module+el8.8.0+18968+3d7b19f0.1	0:3.9.2-2.module+el8.4.0+22379+dcc60181.4, 0:3.9.16-1.module+el8.8.0+22374+62aa8e74.4	6
python3x-piprpm	19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf1249	0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1, 0:20.2.4-7.module+el8.6.0+13003+6bb2c488	4
python3.11-setuptoolsrpm	65.5.1-2.el9, 65.5.1-2.el9_4.1	0:65.5.1-4.el9_6	2
python-wheelrpm	0.33.6-5.module+el8.4.0+8888+89bc7e79	1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1	1
python-3.11deb	3.11.15+e4	3.11.16+e2	1

OSV records: BIT-setuptools-2025-47273 CGA-6rww-wjff-6g99 CGA-gfc8-q7jm-4w3v DEBIAN-CVE-2025-47273 PYSEC-2025-49 RHSA-2025:10407 RHSA-2025:11036 RHSA-2025:11984 RHSA-2025:13578 RHSA-2025:15408 RHSA-2025:15410 RHSA-2025:15411 RLSA-2025:10407 RLSA-2025:11036 UBUNTU-CVE-2025-47273 DLA-4183-1 ECHO-2d75-a206-3684 USN-7544-1
Also known as: CGA-wrp2-2xv2-hfvv, CGA-xqm6-7hq3-gpvg, GHSA-5rjg-fvgr-3xxf, RHSA-2025:11424, RHSA-2025:11425, RHSA-2025:11426, RHSA-2025:11427, RHSA-2025:11868, RHSA-2025:12020, RHSA-2025:13669, USN-8010-1

Charts affected

1,071 by stars

Chart

Latest

Affected images

Radar Score

catalyst-agentscatalyst-agents

0.1.30

1 of 18 See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.3	eec354133193	setuptools@76.0.0	78.1.1

Open the chart page →

15,027

tsoragecetic

0.4.11

1 of 8 See more

tsorage cetic 0.4.11

1 of the 8 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
confluentinc/cp-kafka :5.0.1	c87b1c07fb53	setuptools@40.5.0	78.1.1

Open the chart page →

12,018

pypi-servercgsimmons

0.1.0

1 of 1 See more

pypi-server cgsimmons 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
pypiserver/pypiserver :v1.3.2	303ac89b2aa2	setuptools@44.0.0	78.1.1

Open the chart page →

506

ctk-walkthroughchaostoolkit-walkthrough

0.1.0

3 of 3 See more

ctk-walkthrough chaostoolkit-walkthrough 0.1.0

3 of the 3 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
chaostoolkit/back :latest	734f3af86125	setuptools@50.3.2	78.1.1
chaostoolkit/front :latest	7f4a7eb9f7df	setuptools@50.3.2	78.1.1
chaostoolkit/middle :latest	b95ba4961cfc	setuptools@50.3.2	78.1.1

Open the chart page →

5,557

otbrcharts-derwitt-dev

0.2.0

1 of 1 See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
openthread/otbr :latest	f307f59f6432	python-setuptools@39.0.1-2ubuntu0.1	39.0.1-2ubuntu0.1+esm2

Open the chart page →

12,779

chat-searchchat-search

0.1.7

1 of 1 See more

chat-search chat-search 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
ghcr.io/hemslo/chat-search :latest	39d48995a5bd	setuptools@65.5.1	78.1.1

Open the chart page →

4,042

opensipschetan-opensips

0.1.0

1 of 1 See more

opensips chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
chetangautamm/repo :Opensips_Build	b4b94155ff5a	python-setuptools@3.3-1ubuntu2	3.3-1ubuntu2+esm3

Open the chart page →

30,140

sippchetan-opensips

0.1.0

1 of 1 See more

sipp chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
chetangautamm/repo :sipp.v3	e7f7049e1544	setuptools@45.2.0-1	45.2.0-1ubuntu0.3

Open the chart page →

12,483

countlychristianhuth

5.2.1

2 of 3 See more

countly christianhuth 5.2.1

2 of the 3 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
countly/api :25.05.4	f4cc7447c4f5	setuptools@56.0.0	78.1.1
countly/frontend :25.05.4	2acbc11499b6	setuptools@56.0.0	78.1.1

Open the chart page →

7,295

keycloak-mcp-serverchristianhuth

1.2.0

1 of 1 See more

keycloak-mcp-server christianhuth 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
quay.io/sshaaf/keycloak-mcp-server :0.4.0	b7e9cba72f8a	python-setuptools@53.0.0-13.el9	0:53.0.0-13.el9_6.1

Open the chart page →

1,423

kube-ops-viewchristianhuth

8.3.3

1 of 1 See more

kube-ops-view christianhuth 8.3.3

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
hjacobs/kube-ops-view :23.5.0	a4fae38f93d7	setuptools@65.5.1	78.1.1

Open the chart page →

1,227

polrchristianhuth

4.3.0

1 of 2 See more

polr christianhuth 4.3.0

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
ajanvier/polr :2.3.0	91ac61b88c85	setuptools@51.3.3	78.1.1

Open the chart page →

5,904

syncserverchristianhuth

1.3.0

1 of 1 See more

syncserver christianhuth 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
mozilla/syncserver :latest	016162bf39d8	setuptools@44.1.0	78.1.1

Open the chart page →

1,382

basechronicle

0.0.8

1 of 1 See more

base chronicle 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
ghcr.io/base-org/node :v0.11.1	1aba0ffe55ea	setuptools@59.6.0-1.2ubuntu0.22.04.2	59.6.0-1.2ubuntu0.22.04.3

Open the chart page →

4,810

kube-acp-stackcloudentity

2.28.0

1 of 7 See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	setuptools@59.6.0-1.2ubuntu0.22.04.2 setuptools@75.8.0	59.6.0-1.2ubuntu0.22.04.3 78.1.1

Open the chart page →

20,900

check-mkcloudnativeapp

0.2.1

1 of 1 See more

check-mk cloudnativeapp 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
nlmacamp/check_mk :latest	5dbb8589f824	setuptools@40.6.2	78.1.1

Open the chart page →

2,408

couchdbcloudnativeapp

1.1.3

1 of 3 See more

couchdb cloudnativeapp 1.1.3

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
kocolosk/couchdb-statefulset-assembler :1.2.0	6effb982154e	setuptools@38.2.3	78.1.1

Open the chart page →

2,110

daskcloudnativeapp

2.2.1

2 of 2 See more

dask cloudnativeapp 2.2.1

2 of the 2 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
daskdev/dask :1.1.0	4ecd7bc35500	setuptools@40.2.0	78.1.1
daskdev/dask-notebook :1.1.0	052630f5ca04	setuptools@40.6.3	78.1.1

Open the chart page →

29,901

distributed-tensorflowcloudnativeapp

0.1.1

1 of 1 See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
cheyang/distributed-tf :1.6.0	46cc34755493	setuptools@38.5.1	78.1.1

Open the chart page →

36,094

ethereumcloudnativeapp

1.0.0

1 of 3 See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	python-setuptools@20.7.0-1	20.7.0-1ubuntu0.1~esm3

Open the chart page →

27,417

k8s-spot-termination-handlercloudnativeapp

1.2.1

1 of 1 See more

k8s-spot-termination-handler cloudnativeapp 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
kubeaws/kube-spot-termination-notice-handler :1.13.0-1	c9cd2ba4373a	setuptools@40.8.0	78.1.1

Open the chart page →

2,095

kube-huntercloudnativeapp

1.0.2

1 of 1 See more

kube-hunter cloudnativeapp 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
aquasec/kube-hunter :195	0bf607ce9308	setuptools@40.6.2	78.1.1

Open the chart page →

1,305

locustcloudnativeapp

1.0.0

1 of 1 See more

locust cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
greenbirdit/locust :0.9.0	e99d53bdc944	setuptools@40.6.3	78.1.1

Open the chart page →

1,352

prometheus-operatorcloudnativeapp

6.4.0

1 of 7 See more

prometheus-operator cloudnativeapp 6.4.0

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
kiwigrid/k8s-sidecar :0.0.18	6eb52513d59e	setuptools@41.0.1	78.1.1

Open the chart page →

2,954

seleniumcloudnativeapp

1.0.8

1 of 1 See more

selenium cloudnativeapp 1.0.8

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
selenium/hub :3.141.59	02f251d48d5f	setuptools@45.2.0-1	45.2.0-1ubuntu0.3

Open the chart page →

11,782

sentry-kubernetescloudnativeapp

0.2.0

1 of 1 See more

sentry-kubernetes cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
getsentry/sentry-kubernetes :latest	6ac37974fd2a	setuptools@40.8.0	78.1.1

Open the chart page →

1,415

supersetcloudnativeapp

1.1.6

1 of 1 See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
amancevice/superset :0.28.1	c8c04bfe3d66	setuptools@40.8.0	78.1.1

Open the chart page →

5,060

webpagetest-agentcloudnativeapp

0.2.0

1 of 1 See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	python-pip@8.1.1-2ubuntu0.4 python-setuptools@20.7.0-1 setuptools@20.7.0	8.1.1-2ubuntu0.6+esm12 20.7.0-1ubuntu0.1~esm3 78.1.1

Open the chart page →

77,758

cp4d-deployercloud-native-toolkit

1.0.0

1 of 1 See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	setuptools@39.2.0 python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-setuptools@39.2.0-7.el8 python-urllib3@1.24.2-5.el8 python3x-pip@19.3.1-6.module+el8.7.0+15823+8950cfa7 python3x-setuptools@41.6.0-5.module+el8.5.0+12205+a865257a	78.1.1 0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:3.11-10.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:39.2.0-9.el8_10 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 0:20.2.4-7.module+el8.6.0+13003+6bb2c488 0:50.3.2-7.module+el8.8.0+23471+79c1a070

Open the chart page →

25,151

developer-dashboardcloud-native-toolkit

1.4.1

1 of 1 See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	setuptools@39.2.0 python-setuptools@39.2.0-5.el8	78.1.1 0:39.2.0-9.el8_10

Open the chart page →

25,456

ibm-toolkit-installcloud-native-toolkit

0.3.0

1 of 1 See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	setuptools@51.3.3	78.1.1

Open the chart page →

6,695

iteration-zerocloud-native-toolkit

0.2.0

1 of 1 See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	setuptools@59.4.0	78.1.1

Open the chart page →

6,921

robot-shopcloud-native-toolkit

1.1.1

1 of 12 See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
robotshop/rs-payment :latest	774b52c6180d	setuptools@57.4.0	78.1.1

Open the chart page →

29,555

cloudlaunchcloudve

0.6.0

1 of 5 See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	setuptools@45.2.0-1 setuptools@45.2.0	45.2.0-1ubuntu0.3 78.1.1

Open the chart page →

12,457

cloudlaunch-servercloudve

0.2.0

1 of 5 See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	setuptools@45.2.0-1 setuptools@45.2.0	45.2.0-1ubuntu0.3 78.1.1

Open the chart page →

12,131

cloudlaunchservercloudve

0.6.0

1 of 4 See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	setuptools@45.2.0-1 setuptools@45.2.0	45.2.0-1ubuntu0.3 78.1.1

Open the chart page →

11,592

galaxykubemancloudve

2.10.1

1 of 7 See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
galaxy/cloudman-server :latest	e5c265fe9fcd	setuptools@45.2.0-1 setuptools@45.2.0	45.2.0-1ubuntu0.3 78.1.1

Open the chart page →

16,069

galaxy-stablecloudve

2.0.0

2 of 5 See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
galaxy/galaxy-init :v18.01	0267bad550e6	python-pip@1.5.4-1ubuntu4 python-setuptools@3.3-1ubuntu2 setuptools@36.5.0.post20170921	no fix listed 3.3-1ubuntu2+esm3 78.1.1
galaxy/galaxy-stable :v18.01	8e577a626dfd	python-pip@1.5.4-1ubuntu4 python-setuptools@3.3-1ubuntu2 setuptools@39.2.0	no fix listed 3.3-1ubuntu2+esm3 78.1.1

Open the chart page →

70,895

janisterminalcloudve

0.1.0

1 of 2 See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
cloudve/janis-terminal :latest	af56e77ca587	python-pip@9.0.1-2.3~ubuntu1.18.04.1 python-setuptools@39.0.1-2 setuptools@39.0.1	9.0.1-2.3~ubuntu1.18.04.8+esm8 39.0.1-2ubuntu0.1+esm2 78.1.1

Open the chart page →

14,270

pulsarcloudve

0.2.0

1 of 2 See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
galaxy/pulsar-kubernetes :0.15.7	e50a890e24c9	setuptools@66.1.1-1+deb12u1 setuptools@66.1.1	66.1.1-1+deb12u2 78.1.1

Open the chart page →

6,162

terminalmancloudve

0.3.4

1 of 1 See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
cloudve/ttyd :latest	d79c1c5881c0	setuptools@46.4.0.post20200518	78.1.1

Open the chart page →

13,156

metaflowcluster-deploy

0.2.2

1 of 1 See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	setuptools@65.5.1	78.1.1

Open the chart page →

8,009

clamapicnieg

2.0.5

1 of 2 See more

clamapi cnieg 2.0.5

1 of the 2 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
ghcr.io/mailu/clamav :1.9.50	01d30483e4a8	setuptools@65.6.0	78.1.1

Open the chart page →

4,671

pulsarcnieg

1.0.8

2 of 2 See more

pulsar cnieg 1.0.8

2 of the 2 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :2.6.1	4db6ff0b4045	setuptools@40.8.0	78.1.1
apachepulsar/pulsar-manager :v0.1.0	b341ef76a852	setuptools@40.6.3.post20190116	78.1.1

Open the chart page →

16,860

codehubcodehub

6.2.18

1 of 5 See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
jupyterhub/jupyterhub :5.4.6	3974ba945e65	setuptools@68.1.2	78.1.1

Open the chart page →

13,220

web3-prometheus-exportercoinpri-helm-charts

0.1.3

1 of 1 See more

web3-prometheus-exporter coinpri-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
guillh/web3-prometheus-exporter :0.3.0	4fb99dbc32b2	setuptools@65.5.1	78.1.1

Open the chart page →

3,378

sumoconsensys

0.4.145

1 of 4 See more

sumo consensys 0.4.145

1 of the 4 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
confluentinc/cp-kafka :7.1.2.amd64	3bf359d5e340	setuptools@39.2.0 python-setuptools@39.2.0-6.el8	78.1.1 0:39.2.0-9.el8_10

Open the chart page →

5,958

kfservingcowboysysop

1.3.1

1 of 3 See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
kfserving/models-web-app :v0.6.1	f322d6ffdfa3	setuptools@57.4.0	78.1.1

Open the chart page →

3,830

cp-helm-chartscp-helm-charts

0.6.1

7 of 8 See more

cp-helm-charts cp-helm-charts 0.6.1

7 of the 8 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
confluentinc/cp-enterprise-control-center :6.1.0	f2975d507a2a	setuptools@39.2.0 python-setuptools@39.2.0-6.el8	78.1.1 0:39.2.0-9.el8_10
confluentinc/cp-enterprise-kafka :6.1.0	8f1544df1f48	setuptools@39.2.0 python-setuptools@39.2.0-6.el8	78.1.1 0:39.2.0-9.el8_10
confluentinc/cp-kafka-connect :6.1.0	4bc70a83ca6f	setuptools@53.0.0 python-setuptools@39.2.0-6.el8	78.1.1 0:39.2.0-9.el8_10
confluentinc/cp-kafka-rest :6.1.0	b0b7aa26254a	setuptools@53.0.0 python-setuptools@39.2.0-6.el8	78.1.1 0:39.2.0-9.el8_10
confluentinc/cp-ksqldb-server :6.1.0	ee403d5b9090	setuptools@53.0.0 python-setuptools@39.2.0-6.el8	78.1.1 0:39.2.0-9.el8_10
confluentinc/cp-schema-registry :6.1.0	b651d4b6185a	setuptools@53.0.0 python-setuptools@39.2.0-6.el8	78.1.1 0:39.2.0-9.el8_10
confluentinc/cp-zookeeper :6.1.0	78c190f4472c	setuptools@53.0.0 python-setuptools@39.2.0-6.el8	78.1.1 0:39.2.0-9.el8_10

Open the chart page →

58,857

couchpotatocronce

0.0.1

1 of 1 See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-47273.

Container image	Digest	Package	Fixed in
linuxserver/couchpotato :75e576ee-ls3	89cd8d5fb1ac	setuptools@40.7.2	78.1.1

Open the chart page →

3,871

Container images carrying it

1,143 by charts deploying them

A fixed version is listed for 18 of the 19 affected packages.

Container image	Digest	Package	Fixed in	Used by
guillh/web3-prometheus-exporter :0.3.0	4fb99dbc32b2	setuptools@65.5.1	78.1.1	1
gurolakman/oam :4.0.0	ed8fd2062548	setuptools@39.2.0 python-setuptools@39.2.0-8.el8_10	78.1.1 0:39.2.0-9.el8_10	1
gurolakman/smsf-configuration :1.0.4	9abb3882bcbd	setuptools@39.2.0 python-setuptools@39.2.0-7.el8	78.1.1 0:39.2.0-9.el8_10	1
gurolakman/smsf-dispatcher :1.0.4	6537e8ed8de8	setuptools@39.2.0 python-setuptools@39.2.0-7.el8	78.1.1 0:39.2.0-9.el8_10	1
gurolakman/smsf-momt :1.0.4	ce23b20a8a17	setuptools@39.2.0 python-setuptools@39.2.0-7.el8	78.1.1 0:39.2.0-9.el8_10	1
gurolakman/smsf-registration :1.0.4	b22e746edd5d	setuptools@39.2.0 python-setuptools@39.2.0-7.el8	78.1.1 0:39.2.0-9.el8_10	1
gurolakman/ussigw-configuration :1.0.4	bf18525c5ad9	setuptools@39.2.0 python-setuptools@39.2.0-7.el8	78.1.1 0:39.2.0-9.el8_10	1
gurolakman/ussigw-core :1.0.4	8739565c3ea2	setuptools@39.2.0 python-setuptools@39.2.0-7.el8	78.1.1 0:39.2.0-9.el8_10	1
ha33ona/python :test	6affdfc644d0	setuptools@57.5.0	78.1.1	1
halkeye/slack-resurrect :v0.1.4	77b05e95fdb5	setuptools@41.0.1	78.1.1	1
hamidyousefi93/saam-test :latest	c34f071f6ed0	setuptools@68.2.2	78.1.1	1
hammerspaceinc/csi-plugin :v1.2.8-rc2	395bee4504fc	setuptools@53.0.0	78.1.1	1
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	setuptools@58.1.0	78.1.1	1
hamzaarshad10/querypodpy :1.7	154f38e8668e	setuptools@65.5.1	78.1.1	1
hansehe/locust :1.1.0	bc8e45262bc4	setuptools@76.0.0	78.1.1	1
haveagitgat/tdarr :2.00.18	1256348872ce	setuptools@45.2.0-1 python-setuptools@44.0.0-2	45.2.0-1ubuntu0.3 44.0.0-2ubuntu0.1+esm2	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	setuptools@45.2.0-1	45.2.0-1ubuntu0.3	1
haveagitgat/tdarr_node :2.17.01	3ff0913202dd	setuptools@45.2.0-1ubuntu0.1 python-setuptools@44.0.0-2ubuntu0.1	45.2.0-1ubuntu0.3 44.0.0-2ubuntu0.1+esm2	1
hayk96/alerta-web :9.0.4	86377705e9e3	setuptools@58.1.0	78.1.1	1
hazelcast/management-center :5.3.2	f9d34300d330	setuptools@39.2.0 python-setuptools@39.2.0-7.el8	78.1.1 0:39.2.0-9.el8_10	1
hcguersoy/cleanreg :v0.8.0	63b76fdcfbe1	setuptools@58.1.0	78.1.1	1
healthchecks/healthchecks :v2.8.1	e82bb0836e30	setuptools@65.5.1	78.1.1	1
helga09/my_sql_shoes :v1.1.1	a03657d97897	setuptools@50.3.2	78.1.1	1
helicone/clickhouse-migration-runner :v2025.03.05-1	4c69b971a7e4	setuptools@45.2.0-1ubuntu0.2 setuptools@45.2.0	45.2.0-1ubuntu0.3 78.1.1	1
hhyo/archery :v1.9.1	1aa41843419e	setuptools@62.6.0	78.1.1	1
hiboxsystems/marge-bot :0.11.0	7235809b43b3	setuptools@65.5.0	78.1.1	1
hiboxsystems/marge-bot :0.12.1	a96c10b61a59	setuptools@65.5.0	78.1.1	1
hiboxsystems/marge-bot :0.14.0	dcffb926e563	setuptools@65.5.1	78.1.1	1
hjacobs/kube-downscaler :23.2.0	5d328c003efe	setuptools@65.5.1	78.1.1	1
hjacobs/kube-janitor :23.7.0	fbb303ed463c	setuptools@65.5.1	78.1.1	1
hjacobs/kube-ops-view :23.5.0	a4fae38f93d7	setuptools@65.5.1	78.1.1	1
hjacobs/kube-resource-report :21.2.1	45f93491c434	setuptools@53.0.0	78.1.1	1
hjacobs/kube-resource-report :22.11.0	c173cd02f5af	setuptools@63.2.0	78.1.1	1
hjacobs/kube-web-view :23.8.0	431f1bf013d0	setuptools@65.5.1	78.1.1	1
hjacobs/kube-web-view :20.10.0	b44a9cf81a2f	setuptools@50.3.0	78.1.1	1
hkotel/mealie :api-v1.0.0beta-2	a7e6b6abe087	setuptools@58.1.0	78.1.1	1
hmdmph/mongo-pod-labeler :1.0.1-alpine	79e4a170f3dc	setuptools@40.8.0	78.1.1	1
hmdmph/redis-pod-labeler :1.0.0-alpine	7f1381fe0f3b	setuptools@47.1.1	78.1.1	1
homeassistant/home-assistant :2023.10.3	021e2afc6e57	setuptools@68.2.2	78.1.1	1
homeassistant/home-assistant :2023.12.4	8d000332b09b	setuptools@68.2.2	78.1.1	1
i4trust/activation-service :2.2.0	9f3719176893	setuptools@57.5.0	78.1.1	1
ibmcom/app-nav-init :1.0.1	240ff499eb5b	setuptools@0.9.8 python-setuptools@0.9.8-7.el7	78.1.1 0:0.9.8-7.el7_9.2	1
ibmcom/app-nav-ui :1.0.1	e2a86997b36b	setuptools@0.9.8 python-setuptools@0.9.8-7.el7	78.1.1 0:0.9.8-7.el7_9.2	1
ibmcom/bai-admin-dev :19.0.2	02d882f2836e	setuptools@0.9.8 python-setuptools@0.9.8-7.el7	78.1.1 0:0.9.8-7.el7_9.2	1
ibmcom/bai-elasticsearch-dev :19.0.2	5441dba2fa00	setuptools@0.9.8 python-setuptools@0.9.8-7.el7	78.1.1 0:0.9.8-7.el7_9.2	1
ibmcom/bai-flink-dev :19.0.2	e31ff09e8aad	setuptools@0.9.8 python-setuptools@0.9.8-7.el7	78.1.1 0:0.9.8-7.el7_9.2	1
ibmcom/bai-flink-zookeeper-dev :19.0.2	58548034cf55	setuptools@0.9.8 python-setuptools@0.9.8-7.el7	78.1.1 0:0.9.8-7.el7_9.2	1
ibmcom/bai-setup-dev :19.0.2	b8e8df11072d	setuptools@0.9.8 python-setuptools@0.9.8-7.el7	78.1.1 0:0.9.8-7.el7_9.2	1
ibmcom/ibmcloud-object-storage-driver :1.8.16	c796a4c693b4	setuptools@39.2.0 python-setuptools@39.2.0-5.el8	78.1.1 0:39.2.0-9.el8_10	1
ibmcom/ibmcloud-object-storage-plugin :1.8.16	9c73804b37a3	setuptools@39.2.0 python-setuptools@39.2.0-5.el8	78.1.1 0:39.2.0-9.el8_10	1