Skip to content
OpenAdvisories

Package · Ubuntu

python-setuptools

3 known vulnerabilities.

All Critical High Medium Low Exploited only

3 results · Feed

  • High 7.7
    CVE-2025-47273

    setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

    setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to ar…

    pypa setuptools python-pip setuptools Debian Ubuntu PyPI
  • High 8.8
    CVE-2024-6345

    Remote Code Execution in pypa/setuptools

    A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index …

    pypa pypa/setuptools python-pip setuptools Debian Ubuntu Alpine PyPI
  • Medium 5.9
    CVE-2022-40897

    pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)

    Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.

    python-pip setuptools setuptools setuptools Debian Ubuntu PyPI