Skip to content
OpenAdvisories

Package · Ubuntu

python-setuptools

3 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2022-40897

    pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)

    Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.

    python-pip setuptools setuptools setuptools Debian Ubuntu PyPI