apidriver (>=0.6.5, <=0.9.1), classification-model (0.0.1) +27 more potentially affected by CVE-2022-40897 via setuptools (56.0.0)

setuptools PYPI version 56.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - apidriver =0.6.5, =3.33.0, =0.41.1, =10.0.0, =0.0.3.6, =1.2.3, =1.0.0, =0.0.18, =1.0.0, =1.4.13, =1.4.29 and more Source cves: CVE-2022-408...

pex (>=1.1.6, <=1.1.15) potentially affected by CVE-2022-40897 via setuptools (20.10.1)

setuptools PYPI version 20.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pex =1.1.6, =1.1.15 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

ngsqc (0.1.1) potentially affected by CVE-2022-40897 via setuptools (20.2.2)

setuptools PYPI version 20.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - ngsqc 0.1.1 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

coala (>=0.4.2.dev20160317151543, <=0.4.2.dev20160317165437), pex (>=1.1.2, <=1.1.5) +1 more potentially affected by CVE-2022-40897 via setuptools (19.7.0)

setuptools PYPI version 19.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - coala =0.4.2.dev20160317151543, =1.1.2, =1.1.5 - pyprint 0.2.2 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

coala (>=0.3.0.dev20151230202701, <=0.4.1.dev20160217212532), igitt (>=0.1.0.dev20160122122211, <=0.2.0.dev20160125152641) +1 more potentially affected by CVE-2022-40897 via setuptools (19.2.0)

setuptools PYPI version 19.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - coala =0.3.0.dev20151230202701, =0.1.0.dev20160122122211, =0.1.0, =0.1.1 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q5...

karellen-stack-core (0.0.1.dev20161001024730) potentially affected by CVE-2022-40897 via setuptools (27.3.1)

setuptools PYPI version 27.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - karellen-stack-core 0.0.1.dev20161001024730 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

alphatrade (1.0.0), apteryx-transformers (>=0.1.0, <=0.1.5) +42 more potentially affected by CVE-2022-40897 via setuptools (57.5.0)

setuptools PYPI version 57.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - alphatrade 1.0.0 - apteryx-transformers =0.1.0, =0.1.0, =0.1.1, =0.0.6, =0.6.1, =0.1.1, =0.1.0, =0.3.0, =0.1.0, =0.2.1 and more Source cves...

harbor-api-client (>=2.7.0, <=2.7.4), ikewaipy (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2022-40897 via setuptools (21.2.2)

setuptools PYPI version 21.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - harbor-api-client =2.7.0, =0.1.0, =0.2.0, =1.2.0 - tb-rest-client-fork 3.9.1 Source cves: CVE-2022-40897 Source advisory:...

binance-us-client (>=0.0.1, <=0.0.8.3), cumulusci (>=3.39.0, <=3.39.1) +10 more potentially affected by CVE-2022-40897 via setuptools (57.1.0)

setuptools PYPI version 57.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - binance-us-client =0.0.1, =3.39.0, =0.2.5.1, =0.0.1, =0.0.1, =0.0.14, =1.0.4.1, =1.0.0, =0.1.3, =0.0.1, =0.0.4 Source cves: CVE-2022-40897...

abstracttradesimplet (>=0.1.18, <=0.1.22) potentially affected by CVE-2022-40897 via setuptools (59.1.1)

setuptools PYPI version 59.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - abstracttradesimplet =0.1.18, =0.1.22 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

GHSA-R9HX-VWMV-Q579 pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)

Python Packaging Authority PyPA's setuptools is a library designed to facilitate packaging Python projects. Setuptools version 65.5.0 and earlier could allow remote attackers to cause a denial of service by fetching malicious HTML from a PyPI package or custom PackageIndex page due to a vulnerabl...

bloomtechlib (0.0.1) potentially affected by CVE-2022-40897 via setuptools (50.0.3)

setuptools PYPI version 50.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bloomtechlib 0.0.1 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

bolinette (>=0.12.1, <=0.14.0) potentially affected by CVE-2022-40897 via setuptools (58.5.2)

setuptools PYPI version 58.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bolinette =0.12.1, =0.14.0 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

scikit-build (0.3.0) potentially affected by CVE-2022-40897 via setuptools (27.2.0)

setuptools PYPI version 27.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - scikit-build 0.3.0 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

seqslab-cli (>=3.2.1.post0, <=3.2.5) potentially affected by CVE-2022-40897 via setuptools (59.0.1)

setuptools PYPI version 59.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - seqslab-cli =3.2.1.post0, =3.2.5 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

archetypal (>=2.1.0, <=2.16.1), cumulusci (>=3.35.0.dev0, <=3.36.0.dev1) +23 more potentially affected by CVE-2022-40897 via setuptools (56.2.0)

setuptools PYPI version 56.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - archetypal =2.1.0, =3.35.0.dev0, =0.0.12, =1.0.0b2, =0.1.0, =0.2.0, =2.0.8, =0.2.0, =2.2.1, =0.0.3, =2.5.0, =2.5.0, =2.6.1 and more Source...

essencebinder (0.1.1.dev0), psycho (>=2.1.5, <=2.2.0) +1 more potentially affected by CVE-2022-40897 via setuptools (61.0.0)

setuptools PYPI version 61.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - essencebinder 0.1.1.dev0 - psycho =2.1.5, =0.3.0.dev0, =0.3.0.dev4 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

quantify-scheduler (0.5.0) potentially affected by CVE-2022-40897 via setuptools (58.0.1)

setuptools PYPI version 58.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - quantify-scheduler 0.5.0 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

aos-prov (>=2.2.0.dev0, <=3.0.1), owasp-zap-historic-parser (0.1.7) +2 more potentially affected by CVE-2022-40897 via setuptools (47.3.2)

setuptools PYPI version 47.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aos-prov =2.2.0.dev0, =0.4.0a2, =1.0.0, =1.0.2 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

melon-music-player (3.0.0a0), nxviz (0.3.5) potentially affected by CVE-2022-40897 via setuptools (38.4.0)

setuptools PYPI version 38.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - melon-music-player 3.0.0a0 - nxviz 0.3.5 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...