neo-cli (>=0.8.2, <=0.9.3), temp-ssh (0.0.1) potentially affected by CVE-2022-40897 via setuptools (37.0.0)

setuptools PYPI version 37.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - neo-cli =0.8.2, =0.9.3 - temp-ssh 0.0.1 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

appsquared (>=0.1.1, <=1.1.1), armadilloml (>=0.1.3, <=0.1.7) +6 more potentially affected by CVE-2022-40897 via setuptools (61.3.1)

setuptools PYPI version 61.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - appsquared =0.1.1, =0.1.3, =0.1.0, =1.0.2, =1.0.2, =0.2.0, =0.3.1 - sentraltimetable 2022.0.7 Source cves: CVE-2022-40897 Source advisory:...

yeedu-cli (>=4.11.0, <=4.13.0) potentially affected by CVE-2022-40897 via setuptools (64.0.0)

setuptools PYPI version 64.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - yeedu-cli =4.11.0, =4.13.0 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

python-mu (>=1.0.1, <=1.0.3) potentially affected by CVE-2022-40897 via setuptools (18.4.0)

setuptools PYPI version 18.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - python-mu =1.0.1, =1.0.3 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)

Python Packaging Authority PyPA's setuptools is a library designed to facilitate packaging Python projects. Setuptools version 65.5.0 and earlier could allow remote attackers to cause a denial of service by fetching malicious HTML from a PyPI package or custom PackageIndex page due to a vulnerabl...

crossbar (17.3.1) potentially affected by CVE-2022-40897 via setuptools (34.3.3)

setuptools PYPI version 34.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - crossbar 17.3.1 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

openslides (2.2.0), openslides-presenter (2.0.3) +2 more potentially affected by CVE-2022-40897 via setuptools (38.7.0)

setuptools PYPI version 38.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - openslides 2.2.0 - openslides-presenter 2.0.3 - openslides-protocol 1.0.0 - openslides-saml 1.0.0 Source cves: CVE-2022-40897 Source...

zshot (>=0.0.1rc0, <=0.0.7) potentially affected by CVE-2022-40897 via setuptools (60.0.5)

setuptools PYPI version 60.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - zshot =0.0.1rc0, =0.0.7 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

vast-cli-fork (>=1.11.72, <=1.11.74) potentially affected by CVE-2022-40897 via setuptools (51.1.1)

setuptools PYPI version 51.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - vast-cli-fork =1.11.72, =1.11.74 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

argnorm (0.0.1rc1), berryworld (>=1.0.0.125849, <=1.0.0.149125) +15 more potentially affected by CVE-2022-40897 via setuptools (61.2.0)

setuptools PYPI version 61.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - argnorm 0.0.1rc1 - berryworld =1.0.0.125849, =0.0.1, =0.5.3, =1.0.3, =1.0.3, =1.0.0, =0.1.1, =0.0.61, =0.1.39 and more Source cves:...

an-website (22.6.11), vgs-api-client (>=0.0.1.dev202206171951, <=0.0.45) potentially affected by CVE-2022-40897 via setuptools (62.3.3)

setuptools PYPI version 62.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website 22.6.11 - vgs-api-client =0.0.1.dev202206171951, =0.0.45 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

betfairlightweight (>=0.0.0b4, <=1.8.2), example-pkg-naturalett (>=12.5.0, <=13.4.0) +8 more potentially affected by CVE-2022-40897 via setuptools (39.2.0)

setuptools PYPI version 39.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - betfairlightweight =0.0.0b4, =12.5.0, =0.6.1, =0.2.0, =0.80.8, =0.1.0, =1.0.4, =1.2.3 Source cves: CVE-2022-40897 Source advisory:...

fedlearner (>=1.5.0.dev20210429, <=1.5.0.dev20210512), fedlearner-manylinux (1.5.0.dev20210429) +4 more potentially affected by CVE-2022-40897 via setuptools (41.0.0)

setuptools PYPI version 41.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - fedlearner =1.5.0.dev20210429, =0.0.1, =0.0.3, =0.0.1, =0.0.2 - toskose 0.1.0 Source cves: CVE-2022-40897 Source advisory:...

steady-cell-phenotype (>=0.3.0, <=0.3.1) potentially affected by CVE-2022-40897 via setuptools (54.0.0)

setuptools PYPI version 54.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - steady-cell-phenotype =0.3.0, =0.3.1 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

build-vocabulary (0.1.8) potentially affected by CVE-2022-40897 via setuptools (40.6.0)

setuptools PYPI version 40.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - build-vocabulary 0.1.8 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

sila2lib-implementations (0.1.1) potentially affected by CVE-2022-40897 via setuptools (59.1.0)

setuptools PYPI version 59.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - sila2lib-implementations 0.1.1 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

pickley (2.0.14) potentially affected by CVE-2022-40897 via setuptools (44.1.0)

setuptools PYPI version 44.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pickley 2.0.14 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

neuroharmony (0.0.1), pygrest (1.2.0) potentially affected by CVE-2022-40897 via setuptools (40.7.2)

setuptools PYPI version 40.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - neuroharmony 0.0.1 - pygrest 1.2.0 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

asapppy (>=0.1.0.dev9, <=0.1.0.dev14) potentially affected by CVE-2022-40897 via setuptools (49.3.0)

setuptools PYPI version 49.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - asapppy =0.1.0.dev9, =0.1.0.dev14 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

chemgraph (>=0.0.1, <=0.0.8), ivette (>=0.0.3, <=0.0.6) +3 more potentially affected by CVE-2022-40897 via setuptools (50.3.1)

setuptools PYPI version 50.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - chemgraph =0.0.1, =0.0.3, =1.1.0, =1.1.6 - sap-ai-sdk-gen 7.2.0 - simplerl 0.0.11 Source cves: CVE-2022-40897 Source advisory:...