bentodev (>=0.1.17, <=2018.11.2), uranium (>=1.2.0, <=1.7.1) potentially affected by CVE-2025-47273 via setuptools (35.0.1)

setuptools PYPI version 35.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bentodev =0.1.17, =1.2.0, =1.7.1 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

openslides (>=2.1.0b3, <=2.1.1), openslides-votecollector (>=2.0.1, <=2.0.2) potentially affected by CVE-2025-47273 via setuptools (34.4.1)

setuptools PYPI version 34.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - openslides =2.1.0b3, =2.0.1, =2.0.2 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

keepcli (>=1.0.0rc1, <=1.0.1) potentially affected by CVE-2025-47273 via setuptools (34.4.0)

setuptools PYPI version 34.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - keepcli =1.0.0rc1, =1.0.1 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

isomut2py (>=2.0.6, <=2.0.8), kedo-pex (1.2.7.0) +2 more potentially affected by CVE-2025-47273 via setuptools (33.1.1)

setuptools PYPI version 33.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - isomut2py =2.0.6, =1.3.2.post1, =1.2.0, =1.4.5 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

nxviz (>=0.2.0, <=0.2.7), reahl-component (>=4.0.0, <=4.0.1) +6 more potentially affected by CVE-2025-47273 via setuptools (32.3.1)

setuptools PYPI version 32.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - nxviz =0.2.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.1 Source cves: CVE-2025-47273 Source advisory:...

acsoo (>=1.6.0, <=3.0.1), pex (>=1.1.16, <=1.1.20) potentially affected by CVE-2025-47273 via setuptools (30.4.0)

setuptools PYPI version 30.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - acsoo =1.6.0, =1.1.16, =1.1.20 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

coala (>=0.9.0.dev20161126232915, <=0.10.0.dev20161128021310) potentially affected by CVE-2025-47273 via setuptools (28.8.1)

setuptools PYPI version 28.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - coala =0.9.0.dev20161126232915, =0.10.0.dev20161128021310 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

scikit-build (0.3.0) potentially affected by CVE-2025-47273 via setuptools (27.2.0)

setuptools PYPI version 27.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - scikit-build 0.3.0 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

pyupio (0.7.0) potentially affected by CVE-2025-47273 via setuptools (26.1.1)

setuptools PYPI version 26.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pyupio 0.7.0 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

pygrest (1.1.0) potentially affected by CVE-2025-47273 via setuptools (40.7.1)

setuptools PYPI version 40.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pygrest 1.1.0 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

kh-common (>=0.4.7, <=0.4.9), pipelinewise-target-bigquery (>=1.0.0, <=1.1.1) potentially affected by CVE-2025-47273 via setuptools (40.3.0)

setuptools PYPI version 40.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - kh-common =0.4.7, =1.0.0, =1.1.1 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

betfairlightweight (>=0.0.0b4, <=1.8.2), example-pkg-naturalett (>=12.5.0, <=13.4.0) +8 more potentially affected by CVE-2025-47273 via setuptools (39.2.0)

setuptools PYPI version 39.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - betfairlightweight =0.0.0b4, =12.5.0, =0.6.1, =0.2.0, =0.80.8, =0.1.0, =1.0.4, =1.2.3 Source cves: CVE-2025-47273 Source advisory:...

pahelee (1.0.0), sqlcop (>=0.10.8, <=0.10.14) potentially affected by CVE-2025-47273 via setuptools (38.5.0)

setuptools PYPI version 38.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pahelee 1.0.0 - sqlcop =0.10.8, =0.10.14 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

polcart (>=2017.8.25.10.44, <=2017.8.26.10.50), pynets (0.1.0) potentially affected by CVE-2025-47273 via setuptools (36.2.7)

setuptools PYPI version 36.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - polcart =2017.8.25.10.44, =2017.8.26.10.50 - pynets 0.1.0 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

modconf (0.4.0b2), tlseparation (1.1.3) +4 more potentially affected by CVE-2025-47273 via setuptools (36.0.1)

setuptools PYPI version 36.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - modconf 0.4.0b2 - tlseparation 1.1.3 - ws-sheets =0.5.0b1, =0.4.1b17, =0.1.0b11, =0.1.0b17 Source cves: CVE-2025-47273 Source advisory:...

pybuilder (0.11.13) potentially affected by CVE-2025-47273 via setuptools (35.0.2)

setuptools PYPI version 35.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pybuilder 0.11.13 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

coinmetrics (0.2.4), ml4chem (>=0.0.3, <=0.0.6.dev0) +6 more potentially affected by CVE-2025-47273 via setuptools (41.4.0)

setuptools PYPI version 41.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - coinmetrics 0.2.4 - ml4chem =0.0.3, =2020.2.0, =1.0.0, =1.0.0, =1.0.1 - resume-classification 1.0.0 Source cves: CVE-2025-47273 Source...

melon-music-player (3.0.0a0), nxviz (0.3.5) potentially affected by CVE-2025-47273 via setuptools (38.4.0)

setuptools PYPI version 38.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - melon-music-player 3.0.0a0 - nxviz 0.3.5 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

CVE-2025-47273

A flaw was found in the setuptools Python package, specifically within its PackageIndex component. This flaw allows for path traversal, enabling an attacker to write files to arbitrary locations on the filesystem. Successful exploitation could lead to data integrity compromise or system compromis...

Huawei EulerOS: Security Advisory for python-setuptools (EulerOS-SA-2025-1459)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...