2953 matches found
UBUNTU-CVE-2025-47273
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...
CVE-2025-47273
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...
CVE-2025-47273 setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...
CVE-2025-47273
CVE-2025-47273 affects setuptools by a path traversal in PackageIndex prior to 78.1.1, allowing writing files to arbitrary locations with the process’s permissions and potentially enabling remote code execution in context. Affected: setuptools package (Python ecosystem). The issue is fixed in ver...
CVE-2025-47273 setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...
CVE-2025-47273
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in "PackageIndex" is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem wi...
aaiopay (>=0.2.1, <=0.2.2), aaz-dev (>=3.0.0, <=4.6.0) +3959 more potentially affected by CVE-2025-47273 via setuptools (>=7.0.0, <=78.1.0)
setuptools PYPI version =7.0.0, =0.2.1, =3.0.0, =1.0.0, =0.0.1, =0.1.18, =0.0.1, =0.1.0, =0.1.0, =0.2.6, =0.0.1, =0.0.6 and more Source cves: CVE-2025-47273 Source advisory: MEND:CVE-2025-47273...
CVE-2025-47273
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...
CVE-2025-47273: Improper Limitation of a Pathname to a Restricted Directory
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...
PT-2025-21795
Name of the Vulnerable Software and Affected Versions setuptools versions prior to 78.1.1 Description A path traversal vulnerability in PackageIndex was found in setuptools. An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process...
setuptools path traversal vulnerability
setuptools is a Python library open-sourced by PyPI. A path traversal vulnerability exists in versions of setuptools prior to 78.1.1, which stems from path traversal and could lead to remote code execution...
py-setuptools -- Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf reports: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An...
Security Bulletin: Vulnerability in pypa/setuptools affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.
Summary Potential vulnerability in pypa/setuptools has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...
Alibaba Cloud Linux 3 : 0143: python-setuptools (ALINUX3-SA-2023:0143)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0143 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-40897: Python Packaging Authority PyPA...
Alibaba Cloud Linux 3 : 0062: python-setuptools (ALINUX3-SA-2024:0062)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0062 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-40897: Python Packaging Authority PyPA...
Alibaba Cloud Linux 3 : 0273: python3.11-setuptools (ALINUX3-SA-2024:0273)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0273 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-6345: A vulnerability in the packageindex...
python3.12-setuptools-rust bug fix and enhancement update
An update is available for python3.12-setuptools-rust. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see t...
python3.12-setuptools-rust bug fix and enhancement update
An update is available for python3.12-setuptools-rust. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see t...
RLSA-2024:2987 Moderate: python27:2.7 security update
Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for...
actinia-core (6.0.0), aipackagewrapper (0.1.0) +59 more potentially affected by CVE-2025-47273 via setuptools (>=78.0.1, <=78.1.0)
setuptools PYPI version =78.0.1, =4.1.0, =1.4.1, =0.1.0, =0.0.20, =0.1.0, =8.6.2, =0.26.0, =8.6.2, =3.0.0.dev0, =2.5.0rc0, =2.8.1 - cx-freeze 8.1.0 and more Source cves: CVE-2025-47273 Source advisory: SNYK:PYTHON-SETUPTOOLS-9964606...