Skip to content
OpenAdvisories

Package · PyPI

setuptools

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    GHSA-xmj3-9gf7-h52w

    setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description

    ### Summary On Windows, attacker-controlled content in a wheel's `.dist-info/namespace_packages.txt` can cause setuptools' legacy wheel installation path to create an `__init__.py` outside the requested `destination_eggdir`. The attacker can influence the des…

    setuptools PyPI