Skip to content
OpenAdvisories

Vendor

pypa

27 known vulnerabilities.

Products

virtualenv 22 setuptools 2 pipenv 1 pypa/setuptools 1 wheel 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2026-24049 Public exploit

    wheel Allows Arbitrary File Permission Modification via Path Traversal

    wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic b…

    pypa wheel python-pip wheel Debian Ubuntu Alpine PyPI
  • High 7.7
    CVE-2025-47273 Public exploit

    setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

    setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to ar…

    pypa setuptools python-pip setuptools Debian Ubuntu PyPI
  • High 8.0
    CVE-2022-21668 Public exploit

    Pipenv's requirements.txt parsing allows malicious index url in comments

    pipenv is a Python development workflow tool. Starting with version 2018.10.9 and prior to version 2022.1.8, a flaw in pipenv's parsing of requirements files allows an attacker to insert a specially crafted string inside a comment anywhere within a requiremen…

    pypa pipenv pipenv pipenv Ubuntu PyPI