GHSA-XMJ3-9GF7-H52W setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description

Summary On Windows, attacker-controlled content in a wheel's .dist-info/namespacepackages.txt can cause setuptools' legacy wheel installation path to create an init.py outside the requested destinationeggdir. The attacker can influence the destination path, but not the contents of the created fil...

setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description

Summary On Windows, attacker-controlled content in a wheel's .dist-info/namespacepackages.txt can cause setuptools' legacy wheel installation path to create an init.py outside the requested destinationeggdir. The attacker can influence the destination path, but not the contents of the created fil...

CVE-2024-25081_2025-47273

CVE-2024-25081 and CVE-2025-47273 Proof of Concept FontForge ≤ 20230101 version and Setuptools library Proof of concept for elevating privileges to the user running a task that uses Font Forge. The second CVE elevates privileges to root, provided you have write permissions to sensitive directorie...

CVE-2025-47273-PoC

CVE-2025-47273: setuptools version 78.1.0 - Path Traversal in setuptools.packageindex Disclaimer This Proof of Concept PoC is intended for educational purposes and authorized security auditing only. The author assumes no responsibility for misuse of this information. Unauthorized access to comput...

ROOT-APP-PYPI-CVE-2024-6345 CVE-2024-6345 in setuptools - Patched by Root

Root has patched CVE-2024-6345 in the setuptools package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2022-40897 CVE-2022-40897 in setuptools - Patched by Root

Root has patched CVE-2022-40897 in the setuptools package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-47273 CVE-2025-47273 in setuptools - Patched by Root

Root has patched CVE-2025-47273 in the setuptools package for Root:PyPI. Multiple fixed versions available...

CVE-2025-47273-POC

setuptools Path Traversal CVE-2025-47273 📖 Overview Proof-of-concept exploit for a path traversal vulnerability in Python setuptools pythonserver.py 'EOF' import http.server import socketserver class Handlerhttp.server.SimpleHTTPRequestHandler:...

CLEANSTART-2026-BQ91197 setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages

CVE-2026-59890 affects multiple packages. setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. See references for individual vulnerability details...

CLEANSTART-2026-YA80016 setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages

CVE-2025-47273 affects multiple packages. setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. See references for individual vulnerability details...

Security Bulletin: IBM SOAR QRadar Plugin App is vulnerable to using components with known vulnerabilities (CVE-2026-59890)

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM SOAR QRadar Plugin App has addressed the applicable CVEs with an update. Vulnerability Details CVEID:CVE-2026-59890 DESCRIPTION: setuptools is a package that...

Astra Linux – Vulnerability in python-setuptools

Setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability exists in Setuptools prior to version 78.1.1. An attacker could be allowed to write files to arbitrary locations on the file system with the permissions of...

CLEANSTART-2026-QB58393 setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages

Security vulnerability affects the k8s-sidecar package. setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages...

EulerOS 2.0 SP13 : python-setuptools (EulerOS-SA-2026-4098)

According to the versions of the python-setuptools packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileLis...

EulerOS 2.0 SP11 : python-setuptools (EulerOS-SA-2026-4371)

According to the versions of the python-setuptools packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileLis...

EulerOS 2.0 SP11 : python-setuptools (EulerOS-SA-2026-4281)

According to the versions of the python-setuptools packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileLis...

EulerOS 2.0 SP13 : python-setuptools (EulerOS-SA-2026-4189)

According to the versions of the python-setuptools packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileLis...

Security Bulletin: Security vulnerability in Python affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak

Summary A security vulnerability in Python affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak. Python is used by IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak as part of its deployment. This bulletin identifies the fixes...

Security Bulletin: Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in version 1.0.2.0 Vulnerability Details CVEID:CVE-2026-30892 DESCRIPTION: crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the crun exec option -u --user is incorrectly...

EulerOS 2.0 SP15 : python-setuptools (EulerOS-SA-2026-4010)

According to the versions of the python-setuptools packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal...