Skip to content
OpenAdvisories

Package · Ubuntu

python-setuptools

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.7
    CVE-2025-47273 Public exploit

    setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

    setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to ar…

    pypa setuptools python-pip setuptools Debian Ubuntu PyPI
  • High 8.8
    CVE-2024-6345

    Remote Code Execution in pypa/setuptools

    A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index …

    pypa pypa/setuptools python-pip setuptools Debian Ubuntu Alpine PyPI