UBUNTU-CVE-2022-40897

Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service ReDoS in packageindex.py...

abn-amro-assessment-2024 (>=0.0.1 <=0.0.5), abn-amro-test (=0.0.1) +1520 more potentially affected by CVE-2022-40897 via setuptools (>=15.2.0 <=65.5.0)

setuptools PYPI version =15.2.0, =0.0.1, =0.1.18, =0.0.1, =0.1.0, =0.2.6, =1.6.0, =0.0.3, =1.1.6, =1.0.1, =0.0.1, =0.0.50, =0.0.6, =0.1.0, =0.1.9 and more Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

Python 安全漏洞

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security vulnerability exists in Python Python Packaging Authority PyPA setuptools version 65.3.0 and earlier. A...

PT-2022-6567

Name of the Vulnerable Software and Affected Versions Python Packaging Authority PyPA setuptools versions 65.3.0 through 65.5.0 Description The issue is related to insufficient input validation when processing HTML content, allowing remote attackers to cause a denial of service via crafted HTML i...