Lucene search
K

958 matches found

AstraLinux
AstraLinux
added 5 days ago5 views

Astra Linux – Vulnerability in python-setuptools

Setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability exists in Setuptools prior to version 78.1.1. An attacker could be allowed to write files to arbitrary locations on the file system with the permissions of...

8.8CVSS7.1AI score0.01428EPSS
Exploits4References2
OSV
OSV
added 2026/06/15 11:50 a.m.5 views

ROOT-APP-PYPI-CVE-2025-47273 CVE-2025-47273 in rootio-setuptools - Patched by Root

Root has patched CVE-2025-47273 in the rootio-setuptools package for Root:PyPI. Multiple fixed versions available...

8.8CVSS6.5AI score0.01428EPSS
Exploits4
OSV
OSV
added 2026/06/15 11:50 a.m.5 views

ROOT-APP-PYPI-CVE-2024-6345 CVE-2024-6345 in rootio-setuptools - Patched by Root

Root has patched CVE-2024-6345 in the rootio-setuptools package for Root:PyPI. Multiple fixed versions available...

8.8CVSS7.8AI score0.01939EPSS
Exploits0
OSV
OSV
added 2026/06/03 7:6 p.m.5 views

ROOT-APP-PYPI-CVE-2022-40897 CVE-2022-40897 in rootio-setuptools - Patched by Root

Root has patched CVE-2022-40897 in the rootio-setuptools package for Root:PyPI. Multiple fixed versions available...

7.5CVSS8.2AI score0.02617EPSS
Exploits1
IBM Security Bulletins
IBM Security Bulletins
added 2026/05/27 4:7 p.m.9 views

Security Bulletin: Maximo AI Service uses azure-core 1.37.0 and setuptools 75.8.0 which are vulnerable to CVE-2026-21226 and CVE-2025-47273.

Summary Maximo AI Service uses azure-core 1.37.0 and setuptools 75.8.0 which are vulnerable to CVE-2026-21226 and CVE-2025-47273. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-21226 DESCRIPTION: Deserialization of untrusted da...

8.8CVSS7.7AI score0.01428EPSS
Exploits4Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/05/15 12:0 a.m.9 views

FreeBSD : py-setuptools -- Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (690144e9-4f88-11f1-982e-00a098b42aeb)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 690144e9-4f88-11f1-982e-00a098b42aeb advisory. https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf reports: setuptools is a...

8.8CVSS7.3AI score0.01428EPSS
Exploits4References3
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.4 views

Astra Linux – Vulnerability in python-setuptools

Python Packaging Authority PyPA’s setuptools before version 65.5.1 allows remote attackers to cause a denial of service through HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service ReDoS vulnerability present in packageindex.py...

5.9CVSS6.8AI score0.02617EPSS
Exploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/22 12:3 p.m.2 views

Security Bulletin: Vulnerability in setuptools affects IBM Netezza Appliance

Summary The setuptools package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2025-47273 Vulnerability Details CVEID:CVE-2025-47273 DESCRIPTION: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python...

8.8CVSS6.6AI score0.01428EPSS
Exploits4Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/14 3:8 p.m.2 views

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a path traversal in setuptools [CVE-2025-47273]

Summary M Watson Speech Services Cartridge is vulnerable to a path traversal in setuptools, due to an issue that allows users to download, build, install, upgrade, and uninstall Python packages CVE-2025-47273. Setuptools is used in our speech service runtimes. This vulnerabilitiy has been...

8.8CVSS7.4AI score0.01428EPSS
Exploits4Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/04/09 12:0 a.m.3 views

NewStart CGSL MAIN 6.06 : python3.11-setuptools Vulnerability (NS-SA-2025-0242)

The remote NewStart CGSL host, running version MAIN 6.06, has python3.11-setuptools packages installed that are affected by a vulnerability: - A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These...

8.8CVSS7.9AI score0.01939EPSS
Exploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/03 12:35 p.m.3 views

Security Bulletin: IBM Security Verify Directory (Container) is affected by a vulnerability in the setuptools package (CVE-2025-47273)

Summary A vulnerability in the setuptools package used by IBM Security Verify Directory Container has been addressed Vulnerability Details CVEID:CVE-2025-47273 DESCRIPTION: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path...

8.8CVSS6.5AI score0.01428EPSS
Exploits4Affected Software1
GithubExploit
GithubExploit
added 2026/03/17 4:58 p.m.203 views

Exploit for Path Traversal in Python Setuptools

HackTheBox - VariaType Machine Writeup !HTBhttps://img.shie...

8.8CVSS7.1AI score0.01428EPSS
Exploits4
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/16 3:40 p.m.9 views

Security Bulletin: Due to the use of Python setuptools IBM Foundationdb Operator is vulunerable for denial of service attack

Summary IBM Database Operator for FoundationDB contains Python setuptools internally CVE-2022-40897 Vulnerability Details CVEID:CVE-2022-40897 DESCRIPTION: Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package o...

5.9CVSS6.9AI score0.02617EPSS
Exploits1Affected Software1
GithubExploit
GithubExploit
added 2026/03/15 11:3 p.m.316 views

Exploit for Path Traversal in Python Setuptools

CVE-2025-47273: Path Traversal in setuptools.packageindex...

8.8CVSS6AI score0.01428EPSS
Exploits4
GithubExploit
GithubExploit
added 2026/03/15 9:8 p.m.348 views

Exploit for Path Traversal in Python Setuptools

setuptools Path Traversal CVE-2025-47273 📖 Overview Proof...

8.8CVSS7.3AI score0.01428EPSS
Exploits4
Redos
Redos
added 2026/03/10 12:0 a.m.5 views

ROS-20260310-73-0042

Vulnerability in python-setuptools related to incorrect path name restriction to a restricted directory. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information...

8.6CVSS5.8AI score0.00527EPSS
Exploits1
OSV
OSV
added 2026/03/05 8:0 a.m.4 views

ROOT-OS-DEBIAN-13-CVE-2026-23949 CVE-2026-23949 in rootio-setuptools - Patched by Root

Root has patched CVE-2026-23949 in the rootio-setuptools package for Root:Debian:13. Multiple fixed versions available...

8.6CVSS5.9AI score0.00527EPSS
Exploits1
Debian
Debian
added 2026/02/06 9:24 p.m.6 views

[SECURITY] [DLA 4471-1] debian-security-support update

Debian LTS Advisory DLA-4471-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón February 06, 2026 https://wiki.debian.org/LTS Package : debian-security-support Version : 1:11+2026.02.06 Debian Bug : 1117607 1119290 1124248 debian-security-support, the Debian...

5.8AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/02/06 12:0 a.m.4 views

Debian dla-4471 : debian-security-support - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4471 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4471-1 [email protected] https://www.debian.org/lts/security/...

5.5AI score
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/01/30 5:39 a.m.13 views

Security Bulletin: IBM Edge Data Collector uses Python package - setuptools which is vulnerable to CVE-2025-47273, CVE-2024-6345.

Summary IBM Edge Data Collector uses Python package - setuptools which is vulnerable to CVE-2025-47273, CVE-2024-6345. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-47273 DESCRIPTION: setuptools is a package that allows users ...

8.8CVSS6.6AI score0.01939EPSS
Exploits4Affected Software1
Rows per page
Query Builder