ROS-20260310-73-0042

Vulnerability in python-setuptools related to incorrect path name restriction to a restricted directory. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information...

ROOT-OS-DEBIAN-13-CVE-2026-23949 CVE-2026-23949 in rootio-setuptools - Patched by Root

Root has patched CVE-2026-23949 in the rootio-setuptools package for Root:Debian:13. Multiple fixed versions available...

[SECURITY] [DLA 4471-1] debian-security-support update

Debian LTS Advisory DLA-4471-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón February 06, 2026 https://wiki.debian.org/LTS Package : debian-security-support Version : 1:11+2026.02.06 Debian Bug : 1117607 1119290 1124248 debian-security-support, the Debian...

Debian dla-4471 : debian-security-support - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4471 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4471-1 [email protected] https://www.debian.org/lts/security/...

Security Bulletin: IBM Edge Data Collector uses Python package - setuptools which is vulnerable to CVE-2025-47273, CVE-2024-6345.

Summary IBM Edge Data Collector uses Python package - setuptools which is vulnerable to CVE-2025-47273, CVE-2024-6345. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-47273 DESCRIPTION: setuptools is a package that allows users ...

NewStart CGSL MAIN 6.06 : python-setuptools Vulnerability (NS-SA-2025-0240)

The remote NewStart CGSL host, running version MAIN 6.06, has python-setuptools packages installed that are affected by a vulnerability: - A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These...

CVE-2026-23949 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kubeflow-jupyter-web-app, open-webui, kserve, mlflow, emissary, py3-setuptools, pypy-3.10, superset, dask-kubernetes, airflow, py3-cassandra-medusa, pypy-3.11, datadog-agent, semgrep...

CVE-2026-23949 vulnerabilities

Vulnerabilities for packages: awx, emissary, datadog-agent-fips, pypy-3.11, localstack, label-studio, duplicity, kserve, py3-setuptools, authentik-fips, apache-beam-python-3.11-sdk, authentik, py3-cassandra-medusa, tensorflow-cpu-jupyter, py3.9-setuptools, mlflow, dbt-bigquery, open-webui,...

Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack

Summary - Vulnerability Type: Path Traversal CWE-22 leading to Arbitrary File Permission Modification. - Root Cause Component: wheel.cli.unpack.unpack function. - Affected Packages: 1. wheel Upstream source 2. setuptools Downstream, vendors wheel - Severity: High Allows modifying system file...

GHSA-8RRH-RW8J-W5FX Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack

Summary - Vulnerability Type: Path Traversal CWE-22 leading to Arbitrary File Permission Modification. - Root Cause Component: wheel.cli.unpack.unpack function. - Affected Packages: 1. wheel Upstream source 2. setuptools Downstream, vendors wheel - Severity: High Allows modifying system file...

GHSA-58PV-8J8X-9VJ2 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kubeflow-jupyter-web-app, open-webui, kserve, mlflow, emissary, py3-setuptools, pypy-3.10, superset, dask-kubernetes, airflow, py3-cassandra-medusa, pypy-3.11, datadog-agent, semgrep...

GHSA-58PV-8J8X-9VJ2 vulnerabilities

Vulnerabilities for packages: awx, emissary, datadog-agent-fips, pypy-3.11, localstack, label-studio, duplicity, kserve, py3-setuptools, authentik-fips, apache-beam-python-3.11-sdk, authentik, py3-cassandra-medusa, tensorflow-cpu-jupyter, py3.9-setuptools, mlflow, dbt-bigquery, open-webui,...

Security Bulletin: Vulnerabilities in setuptools affects IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Potential vulnerability in setuptools has been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-47273 DESCRIPTION:...

MiracleLinux 8 : python27:2.7 (AXSA:2024-8406:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8406:01 advisory. pypa-setuptools: Regular Expression Denial of Service ReDoS in packageindex.py CVE-2022-40897 python: use after free in heappushpop of heapq module...

MiracleLinux 9 : python3.11-setuptools-65.5.1-2.el9_4.1 (AXSA:2024-8653:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8653:01 advisory. pypa/setuptools: Remote code execution via download functions in the packageindex module in pypa/setuptools CVE-2024-6345 Tenable has extracted the preceding...

MiracleLinux 8 : python39:3.9 and python39-devel:3.9 (AXSA:2024-8745:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8745:01 advisory. python: incorrect IPv4 and IPv6 private ranges CVE-2024-4032 pypa/setuptools: Remote code execution via download functions in the packageindex modul...

MiracleLinux 9 : fence-agents-4.10.0-62.el9_4.5 (AXSA:2024-8822:11)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8822:11 advisory. pypa/setuptools: Remote code execution via download functions in the packageindex module in pypa/setuptools CVE-2024-6345 Tenable has extracted the preceding...

MiracleLinux 7 : python-setuptools-0.9.8-7.0.1.el7.AXS7 (AXSA:2024-9025:03)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-9025:03 advisory. CVE-2024-6345: modernize packageindex VCS handling CVEs: CVE-2024-6345 A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1...

MiracleLinux 8 : python39:3.9 and python39-devel:3.9 (AXSA:2024-8429:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8429:01 advisory. pypa-setuptools: Regular Expression Denial of Service ReDoS in packageindex.py CVE-2022-40897 python-cryptography: memory corruption via immutable...

MiracleLinux 9 : python-setuptools-53.0.0-10.el9.1 (AXSA:2023-5193:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5193:02 advisory. pypa-setuptools: Regular Expression Denial of Service ReDoS in packageindex.py CVE-2022-40897 Tenable has extracted the preceding description block directly...