StackRadar

CVE-2026-59890

Medium

Advisory

Published 8 Jul 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,256
of 17,781 indexed, latest versions
Container images
1,314
deployed by those charts
Fix available
4 of 5
affected packages

setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+

Carried by container images the latest versions of 1,256 of 17,781 indexed charts deploy, on 1,314 images.

Affected packageAffected versionsFixed inImages
setuptoolspypi0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+135 more83.0.01,252
setuptoolsdeb45.2.0-1, 45.2.0-1ubuntu0.1, 45.2.0-1ubuntu0.2, 45.2.0-1ubuntu0.3+9 moreno fix listed160
setuptoolsbitnami70.3.0, 80.9.083.0.03
py3-setuptoolsapk75.8.0-r083.0.0-r01
python-3.11deb3.11.15+e43.11.16+e21
OSV records
BIT-setuptools-2026-59890CGA-45cv-ppqx-4qxhGHSA-h35f-9h28-mq5cUBUNTU-CVE-2026-59890ECHO-732c-d358-5fef
Also known as
CGA-4hr8-28qq-pc5f, CGA-7mpr-r977-c726, CGA-qfw9-8w49-7c33, PYSEC-2026-3447

Charts affected

1,256 by stars
ChartLatestAffected imagesRadar Score
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
setuptools@58.1.0
83.0.0

Open the chart page →

11,367
rook-cephrookOfficialVerified publisher1.20.71 of 2See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
rook/ceph:v1.20.72f970c425617
setuptools@69.2.0
83.0.0

Open the chart page →

1,447
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
setuptools@39.2.0
83.0.0

Open the chart page →

7,713
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.92.11 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.92.1

1 of the 7 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.8.1abb55b2165c6
setuptools@82.0.1
83.0.0

Open the chart page →

1,889
openebsopenebsOfficialVerified publisher4.6.11 of 35See more

openebs openebs 4.6.1

1 of the 35 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.30.2cdb361e67b1b
setuptools@76.0.0
83.0.0

Open the chart page →

23,894
dagsterdagsterVerified publisher1.13.222 of 5See more

dagster dagster 1.13.22

2 of the 5 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
dagster/dagster-celery-k8s:1.13.22e29a64392e12
setuptools@79.0.1
83.0.0
dagster/user-code-example:1.13.225947f9ae481c
setuptools@79.0.1
83.0.0

Open the chart page →

3,455
zabbixzabbix-communityVerified publisher7.1.01 of 5See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-7.0.237d4d58086515
setuptools@68.1.2-2ubuntu1.2
no fix listed

Open the chart page →

13,664
ceph-csi-cephfsceph-csiOfficialVerified publisher3.17.11 of 6See more

ceph-csi-cephfs ceph-csi 3.17.1

1 of the 6 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
setuptools@69.2.0
83.0.0

Open the chart page →

4,061
ceph-csi-rbdceph-csiOfficialVerified publisher3.17.11 of 6See more

ceph-csi-rbd ceph-csi 3.17.1

1 of the 6 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
setuptools@69.2.0
83.0.0

Open the chart page →

4,061
datahubdatahubVerified publisher1.1.41 of 4See more

datahub datahub 1.1.4

1 of the 4 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
acryldata/datahub-actions:v1.7.0.1c5fd70130157
setuptools@81.0.0
83.0.0

Open the chart page →

635
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
setuptools@63.4.2
83.0.0

Open the chart page →

9,145
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
setuptools@45.2.0-1
setuptools@45.2.0
no fix listed
83.0.0

Open the chart page →

32,259
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
setuptools@66.1.1
83.0.0

Open the chart page →

10,622
semaphoresemaphoreuiOfficialVerified publisher16.2.21 of 1See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.18.3e9260bfa8255
setuptools@70.3.0
83.0.0

Open the chart page →

2,221
locustdeliveryheroVerified publisher0.35.01 of 1See more

locust deliveryhero 0.35.0

1 of the 1 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
setuptools@65.5.1
83.0.0

Open the chart page →

2,800
nacosygqygq2Verified publisher2.1.101 of 4See more

nacos ygqygq2 2.1.10

1 of the 4 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
ygqygq2/mysql-exec-sql:latest54f30def1558
setuptools@50.3.2
83.0.0

Open the chart page →

4,983
difydoubanVerified publisher0.10.02 of 6See more

dify douban 0.10.0

2 of the 6 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
setuptools@68.1.2-2ubuntu1.2
setuptools@68.1.2
no fix listed
83.0.0
langgenius/dify-sandbox:0.2.124e65e8a351a2
setuptools@65.5.1
83.0.0

Open the chart page →

19,391
stackgres-operatorstackgres-chartsOfficialVerified publisher1.19.12 of 2See more

stackgres-operator stackgres-charts 1.19.1

2 of the 2 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
quay.io/ongres/kubectl:v1.25.16-build-6.5304dada9e4503
setuptools@68.2.2
83.0.0
quay.io/stackgres/operator:1.19.1f241b0b20326
setuptools@68.2.2
83.0.0

Open the chart page →

2,119
pulsarapache4.7.02 of 10See more

pulsar apache 4.7.0

2 of the 10 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
setuptools@82.0.0
83.0.0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
setuptools@80.9.0
83.0.0

Open the chart page →

9,864
difydify-helmVerified publisher0.38.03 of 11See more

dify dify-helm 0.38.0

3 of the 11 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
langgenius/dify-agent-backend:1.16.1097d3fd27a7b
setuptools@82.0.1
83.0.0
langgenius/dify-api:1.16.1dcefa5f7c47c
setuptools@80.10.2
83.0.0
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
setuptools@68.1.2-2ubuntu1.2
setuptools@68.1.2
no fix listed
83.0.0

Open the chart page →

22,002
ambassadordatawire6.9.51 of 2See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
setuptools@50.3.2
83.0.0

Open the chart page →

4,086
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
grafana/oncall:v1.16.5499851658393
setuptools@80.9.0
83.0.0

Open the chart page →

16,251
wazuhwazuh-helm-morgovedVerified publisher2.0.72 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

2 of the 5 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
setuptools@66.1.1
83.0.0
wazuh/wazuh-manager:4.14.3f09282d281f6
setuptools@79.0.1
83.0.0

Open the chart page →

11,384
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
setuptools@59.6.0-1.2
no fix listed

Open the chart page →

33,725
emissary-ingressdatawire7.1.8-ea1 of 1See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
datawire/emissary:2.0.2-ea9716efbdd24b
setuptools@50.3.2
83.0.0

Open the chart page →

4,918
kube-downscalerdeliveryheroVerified publisher0.7.61 of 1See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
setuptools@65.5.1
83.0.0

Open the chart page →

4,293
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
setuptools@60.8.1
83.0.0

Open the chart page →

7,705
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
setuptools@67.6.0
83.0.0

Open the chart page →

6,543
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
setuptools@65.5.0
83.0.0

Open the chart page →

5,987
pypiservercommunity-chartsVerified publisher0.1.91 of 1See more

pypiserver community-charts 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
pypiserver/pypiserver:v2.4.1e935e19433ef
setuptools@65.5.1
83.0.0

Open the chart page →

584
daskdask2024.1.12 of 2See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
ghcr.io/dask/dask:2024.1.0080150de7d86
setuptools@68.1.2
83.0.0
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
setuptools@69.0.3
83.0.0

Open the chart page →

12,746
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
setuptools@78.1.1
83.0.0

Open the chart page →

9,683
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
setuptools@68.2.2
83.0.0

Open the chart page →

6,041
yugabyteyugabyteVerified publisher2026.1.11 of 1See more

yugabyte yugabyte 2026.1.1

1 of the 1 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
yugabytedb/yugabyte:2026.1.1.1-b23926eedf0ff4
setuptools@65.5.1
83.0.0

Open the chart page →

351
edge-stackdatawire7.1.8-ea1 of 2See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
datawire/aes:2.0.3-ea07f8fe4f4f8e
setuptools@50.3.2
83.0.0

Open the chart page →

5,173
milvusmilvus-helm5.0.271 of 4See more

milvus milvus-helm 5.0.27

1 of the 4 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
setuptools@59.6.0-1.2ubuntu0.22.04.2
setuptools@59.6.0
no fix listed
83.0.0

Open the chart page →

10,670
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
setuptools@45.2.0-1
no fix listed

Open the chart page →

18,509
apicurio-registryapicurio-registry-helmVerified publisher3.8.01 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
setuptools@39.2.0
83.0.0

Open the chart page →

6,675
ansible-semaphorecloudhippieVerified publisher15.2.101 of 1See more

ansible-semaphore cloudhippie 15.2.10

1 of the 1 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
setuptools@70.3.0
83.0.0

Open the chart page →

1,235
supersetcloudposse1.2.01 of 1See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
setuptools@44.0.0
83.0.0

Open the chart page →

5,851
servarrkubitodevVerified publisher1.5.21 of 10See more

servarr kubitodev 1.5.2

1 of the 10 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.3.21f104ee51e512
setuptools@65.5.1
83.0.0

Open the chart page →

3,004
memgraphmemgraphVerified publisher1.0.61 of 2See more

memgraph memgraph 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
memgraph/memgraph:3.13.0a1dc375774ed
setuptools@68.1.2-2ubuntu1.2
setuptools@68.1.2
no fix listed
83.0.0

Open the chart page →

1,373
stackstorm-hastackstormVerified publisher1.1.011 of 17See more

stackstorm-ha stackstorm 1.1.0

11 of the 17 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
no fix listed
83.0.0
stackstorm/st2api:3.86f56d239d280
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
no fix listed
83.0.0
stackstorm/st2auth:3.833ecfda16608
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
no fix listed
83.0.0
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
no fix listed
83.0.0
stackstorm/st2notifier:3.8f190a6212195
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
no fix listed
83.0.0
stackstorm/st2rulesengine:3.8259503496ff9
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
no fix listed
83.0.0
stackstorm/st2scheduler:3.8b1de2055c362
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
no fix listed
83.0.0
stackstorm/st2sensorcontainer:3.8b1a338f64773
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
no fix listed
83.0.0
stackstorm/st2stream:3.81c8904a3bf67
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
no fix listed
83.0.0
stackstorm/st2timersengine:3.81bf35bfaf00c
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
no fix listed
83.0.0
stackstorm/st2workflowengine:3.819fdfffdbba8
setuptools@45.2.0-1ubuntu0.1
setuptools@51.3.3
no fix listed
83.0.0

Open the chart page →

96,419
frigateblakeblackshear7.8.01 of 1See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
setuptools@52.0.0
83.0.0

Open the chart page →

3,004
kube-prometheuschoerodon9.3.11 of 7See more

kube-prometheus choerodon 9.3.1

1 of the 7 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.1517b98eecdf6d1
setuptools@46.1.3
83.0.0

Open the chart page →

12,237
openclawopenclawVerified publisher1.91.31 of 2See more

openclaw openclaw 1.91.3

1 of the 2 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
setuptools@68.1.2-2ubuntu1.2
setuptools@68.1.2
no fix listed
83.0.0

Open the chart page →

2,977
dependabot-gitlabdependabot-gitlabVerified publisher6.3.01 of 3See more

dependabot-gitlab dependabot-gitlab 6.3.0

1 of the 3 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
setuptools@68.1.2-2ubuntu1.2
no fix listed

Open the chart page →

4,556
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
setuptools@47.3.1
83.0.0
dbanda/spark:2.4.6d0e6367876ae
setuptools@47.3.1
83.0.0

Open the chart page →

13,738
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
setuptools@82.0.1
83.0.0

Open the chart page →

4,332
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2026-59890.

Container imageDigestPackageFixed in
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
setuptools@49.2.0
83.0.0

Open the chart page →

30,326

Container images carrying it

1,314 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
library/mysql:5.74bc6bc963e6d
setuptools@58.1.0
83.0.0
22
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
setuptools@80.9.0
83.0.0
13
oomk8s/readiness-check:2.0.2875814cc853d
setuptools@40.8.0
83.0.0
11
codeurjc/server:v1.0310bea5b1ee7
setuptools@39.2.0
83.0.0
8
oomk8s/readiness-check:2.0.07daa08b81954
setuptools@39.0.1
83.0.0
6
flaresolverr/flaresolverr:latest:v3.5.0139dfee1c6f8
setuptools@79.0.1
83.0.0
5
quay.io/kiwigrid/k8s-sidecar:2.8.1abb55b2165c6
setuptools@82.0.1
83.0.0
5
cachethq/docker:2.3.15a61ff0f67ea7
setuptools@33.1.1.post20171031
83.0.0
4
mastercloudapps/server:v2.23f3d24dfe2686
setuptools@39.2.0
83.0.0
4
ncsa/checks:1.0.1cc46a03e16ed
setuptools@57.5.0
83.0.0
4
opea/llm-tgi:1.00c25aab3f106
setuptools@65.5.1
83.0.0
4
quay.io/strimzi/operator:0.37.052f376e64b9b
setuptools@39.2.0
83.0.0
4
apache/superset:6.1.0:latest16b50bbef664
setuptools@80.9.0
83.0.0
3
argoproj/argocd:v1.8.1830e86cacefd
setuptools@40.8.0
83.0.0
3
cloudve/cloudlaunch-server:latest4a3d7fae90bb
setuptools@45.2.0-1
setuptools@45.2.0
no fix listed
83.0.0
3
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
setuptools@57.5.0
83.0.0
3
dpage/pgadmin4:6.12781369df9994
setuptools@52.0.0
83.0.0
3
kiwigrid/k8s-sidecar:0.1.193170069ff0976
setuptools@49.6.0
83.0.0
3
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
setuptools@75.1.0
83.0.0
3
kiwigrid/k8s-sidecar:0.1.1517b98eecdf6d1
setuptools@46.1.3
83.0.0
3
kiwigrid/k8s-sidecar:1.30.2cdb361e67b1b
setuptools@76.0.0
83.0.0
3
paulkellerman/resultserver-app:1.0381eeccb0618
setuptools@65.5.0
83.0.0
3
paulkellerman/webserver-app:latest5a37b74f61b9
setuptools@65.5.0
83.0.0
3
selenium/hub:3.141.5902f251d48d5f
setuptools@45.2.0-1
no fix listed
3
solace/solace-pubsub-standard:latest8e8ad105595e
setuptools@80.10.2
83.0.0
3
quay.io/devtron/ai-agent:0.0.16545dac92173
setuptools@72.2.0
83.0.0
3
quay.io/kiwigrid/k8s-sidecar:1.14.235654389f8a9
setuptools@57.5.0
83.0.0
3
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
setuptools@40.8.0
83.0.0
3
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
setuptools@39.2.0
83.0.0
3
alpine/k8s:1.32.12048f8d9c8cc7
setuptools@82.0.0
83.0.0
2
amancevice/superset:0.35.212a0a9e66550
setuptools@44.0.0
83.0.0
2
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
setuptools@0.9.8
83.0.0
2
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
setuptools@40.6.3.post20190116
83.0.0
2
apache/tika:2.9.2.1-fullae0b86d3c4d0
setuptools@68.1.2-2ubuntu1
no fix listed
2
aquasec/kube-hunter:0.6.8e64fe49f059f
setuptools@57.5.0
83.0.0
2
architectminds/aws-kubectl:1.19735e59a1085
setuptools@41.0.1
83.0.0
2
blakeblackshear/frigate:0.11.18330b0a265b8
setuptools@52.0.0
83.0.0
2
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
setuptools@50.3.2
83.0.0
2
confluentinc/cp-zookeeper:latest7610a50b13e7
setuptools@71.1.0
83.0.0
2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
setuptools@39.2.0
83.0.0
2
cs3org/wopiserver:v9.4.202a9e78757b4
setuptools@67.4.0
83.0.0
2
dagster/user-code-example:1.13.225947f9ae481c
setuptools@79.0.1
83.0.0
2
datawire/aes:1.14.48588eafe6862
setuptools@50.3.2
83.0.0
2
devopsjourney1/mywebapp:latestbd1ec6838570
setuptools@57.5.0
83.0.0
2
gisaia/aproc-service:0.18.1ac6564921994
setuptools@80.10.2
83.0.0
2
gisaia/fam:0.18.1ae525930b4b6
setuptools@80.10.2
83.0.0
2
gotenberg/gotenberg:8.36.087c16b9f3642
setuptools@78.1.1
83.0.0
2
gotenberg/gotenberg:8:8.37.0f29984bd1e22
setuptools@78.1.1
83.0.0
2
gradiant/spark:2.4.4-python-alpine97657d56e927
setuptools@41.6.0
83.0.0
2
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
setuptools@65.5.1
83.0.0
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.