vast-cli-fork (>=1.11.72, <=1.11.74) potentially affected by CVE-2024-6345 via setuptools (51.1.1)

setuptools PYPI version 51.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - vast-cli-fork =1.11.72, =1.11.74 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

bikeshed (4.1.0), c7n-policystream (0.4.32) +48 more potentially affected by CVE-2024-6345 via setuptools (69.0.2)

setuptools PYPI version 69.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bikeshed 4.1.0 - c7n-policystream 0.4.32 - c7n-sphinxext 1.1.32 - candlestick-patterns =1.0.1, =0.0.157, =0.0.1, =0.1.35, =0.0.1, =3.10.2,...

catapult-api (0.6.3), cumulusci (>=3.44.0.dev1, <=3.44.0) potentially affected by CVE-2024-6345 via setuptools (58.0.3)

setuptools PYPI version 58.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - catapult-api 0.6.3 - cumulusci =3.44.0.dev1, =3.44.0 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

microbiome-toolbox (>=0.0.8, <=0.0.11), predictnow-client (>=0.0.1, <=0.0.9) potentially affected by CVE-2024-6345 via setuptools (50.3.0)

setuptools PYPI version 50.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - microbiome-toolbox =0.0.8, =0.0.1, =0.0.9 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

batchkit-examples-speechsdk (0.9.1), stringlifier (>=0.1.0.0, <=0.1.0.9) potentially affected by CVE-2024-6345 via setuptools (46.0.0)

setuptools PYPI version 46.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - batchkit-examples-speechsdk 0.9.1 - stringlifier =0.1.0.0, =0.1.0.9 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

karellen-stack-core (0.0.1.dev20161001024730) potentially affected by CVE-2024-6345 via setuptools (27.3.1)

setuptools PYPI version 27.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - karellen-stack-core 0.0.1.dev20161001024730 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

planadversity (1.0.2), uranium (>=0.2.10, <=0.2.22) potentially affected by CVE-2024-6345 via setuptools (18.0.1)

setuptools PYPI version 18.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - planadversity 1.0.2 - uranium =0.2.10, =0.2.22 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

graal (0.4.3rc3), perceval (0.21.2rc3) +5 more potentially affected by CVE-2024-6345 via setuptools (66.1.0)

setuptools PYPI version 66.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - graal 0.4.3rc3 - perceval 0.21.2rc3 - perceval-mozilla 0.3.6rc3 - perceval-opnfv 0.2.6rc3 - perceval-puppet 0.2.6rc3 - perceval-weblate...

aws-data-mesh-utils (>=1.0.4, <=1.0.16), biopal (>=0.3.0rc1, <=0.4.0rc0) +2 more potentially affected by CVE-2024-6345 via setuptools (60.8.2)

setuptools PYPI version 60.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aws-data-mesh-utils =1.0.4, =0.3.0rc1, =1.12.0, =2.0.0, =2.3.2 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

CVE-2024-6345

A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code...

AZL-43329 CVE-2024-6345 affecting package python-setuptools for versions less than 69.0.3-4

A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code...

ALPINE-CVE-2024-6345

A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code...

DEBIAN-CVE-2024-6345

A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code...

AZL-43326 CVE-2024-6345 affecting package python-pip for versions less than 24.2-1

A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code...

CVE-2024-6345 vulnerabilities

Vulnerabilities for packages: request-1276, py3-pipenv, airflow, superset, kubeflow-katib, py3-cassandra-medusa, nvidia-nsight-compute-13.1, k8s-sidecar, az, nemo, py3.9-setuptools, reflex, nvidia-nsight-compute-13.2, checkov...

AZL-60199 CVE-2024-6345 affecting package python3 for versions less than 3.9.19-12

A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code...

CVE-2024-6345

A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code...

UBUNTU-CVE-2024-6345

A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code...

CVE-2024-6345

CVE-2024-6345 affects the setuptools package_index module in setuptools versions up to 69.1.1, enabling remote code execution through user-controlled package download inputs. The vulnerability stems from download functions that can be fed URLs from users or index servers, allowing arbitrary comma...

aaiopay (>=0.2.1, <=0.2.2), abc-xml-converter (>=1.0.0, <=1.0.1) +2842 more potentially affected by CVE-2024-6345 via setuptools (>=7.0.0, <=69.5.1)

setuptools PYPI version =7.0.0, =0.2.1, =1.0.0, =0.0.1, =0.1.18, =0.0.1, =0.1.0, =0.2.6, =1.6.0, =0.0.3, =0.1.1, =0.1.2 and more Source cves: CVE-2024-6345 Source advisory: MEND:CVE-2024-6345...