actinia-core (6.0.0), aipackagewrapper (0.1.0) +59 more potentially affected by CVE-2025-47273 via setuptools (>=78.0.1, <=78.1.0)

setuptools PYPI version =78.0.1, =4.1.0, =1.4.1, =0.1.0, =0.0.20, =0.1.0, =8.6.2, =0.26.0, =8.6.2, =3.0.0.dev0, =2.5.0rc0, =2.8.1 - cx-freeze 8.1.0 and more Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

actinia-core (6.0.0), aipackagewrapper (0.1.0) +59 more potentially affected by CVE-2025-47273 via setuptools (>=78.0.1, <=78.1.0)

setuptools PYPI version =78.0.1, =4.1.0, =1.4.1, =0.1.0, =0.0.20, =0.1.0, =8.6.2, =0.26.0, =8.6.2, =3.0.0.dev0, =2.5.0rc0, =2.8.1 - cx-freeze 8.1.0 and more Source cves: CVE-2025-47273 Source advisory: GHSA-5RJG-FVGR-3XXF...

CVE-2025-47273

A flaw was found in the setuptools Python package, specifically within its PackageIndex component. This flaw allows for path traversal, enabling an attacker to write files to arbitrary locations on the filesystem. Successful exploitation could lead to data integrity compromise or system compromis...

Huawei EulerOS: Security Advisory for python-setuptools (EulerOS-SA-2025-1459)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for python-setuptools (EulerOS-SA-2025-1488)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-47273

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

PYSEC-2025-49

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

AZL-62438 CVE-2025-47273 affecting package setuptool 1.19.11-23

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

AZL-61943 CVE-2025-47273 affecting package python-setuptools for versions less than 69.0.3-5

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

pex (>=0.8.2, <=0.8.6) potentially affected by CVE-2025-47273 via setuptools (7.0.0)

setuptools PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pex =0.8.2, =0.8.6 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

pex (>=0.9.0, <=1.1.1), revscoring (>=0.6.4, <=2.0.4) +3 more potentially affected by CVE-2025-47273 via setuptools (15.2.0)

setuptools PYPI version 15.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pex =0.9.0, =0.6.4, =1.4.1, =0.3.0, =0.3.2 - yt-formula-node 0.0.4 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

planadversity (1.0.2), uranium (>=0.2.10, <=0.2.22) potentially affected by CVE-2025-47273 via setuptools (18.0.1)

setuptools PYPI version 18.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - planadversity 1.0.2 - uranium =0.2.10, =0.2.22 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

uranium (>=0.2.23, <=0.2.34) potentially affected by CVE-2025-47273 via setuptools (18.2.0)

setuptools PYPI version 18.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - uranium =0.2.23, =0.2.34 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

python-mu (>=1.0.1, <=1.0.3) potentially affected by CVE-2025-47273 via setuptools (18.4.0)

setuptools PYPI version 18.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - python-mu =1.0.1, =1.0.3 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

coala (>=0.3.0.dev20151230202701, <=0.4.1.dev20160217212532), igitt (>=0.1.0.dev20160122122211, <=0.2.0.dev20160125152641) +1 more potentially affected by CVE-2025-47273 via setuptools (19.2.0)

setuptools PYPI version 19.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - coala =0.3.0.dev20151230202701, =0.1.0.dev20160122122211, =0.1.0, =0.1.1 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

coala (>=0.4.2.dev20160317151543, <=0.4.2.dev20160317165437), pex (>=1.1.2, <=1.1.5) +1 more potentially affected by CVE-2025-47273 via setuptools (19.7.0)

setuptools PYPI version 19.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - coala =0.4.2.dev20160317151543, =1.1.2, =1.1.5 - pyprint 0.2.2 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

ngsqc (0.1.1) potentially affected by CVE-2025-47273 via setuptools (20.2.2)

setuptools PYPI version 20.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - ngsqc 0.1.1 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

pex (>=1.1.6, <=1.1.15) potentially affected by CVE-2025-47273 via setuptools (20.10.1)

setuptools PYPI version 20.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pex =1.1.6, =1.1.15 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

clean-cybersource-rest-client-python (>=0.0.19, <=0.0.22), ozon-api-client (0.1.10) +2 more potentially affected by CVE-2025-47273 via setuptools (21.0.0)

setuptools PYPI version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - clean-cybersource-rest-client-python =0.0.19, =3.8.0, =3.9.0 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

mindsdb (0.8.9.3), uranium (>=0.2.35, <=1.1.0) potentially affected by CVE-2025-47273 via setuptools (21.2.1)

setuptools PYPI version 21.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - mindsdb 0.8.9.3 - uranium =0.2.35, =1.1.0 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...