pyupio (0.7.0) potentially affected by CVE-2025-47273 via setuptools (26.1.1)

setuptools PYPI version 26.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pyupio 0.7.0 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

scikit-build (0.3.0) potentially affected by CVE-2025-47273 via setuptools (27.2.0)

setuptools PYPI version 27.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - scikit-build 0.3.0 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

karellen-stack-core (0.0.1.dev20161001024730) potentially affected by CVE-2025-47273 via setuptools (27.3.1)

setuptools PYPI version 27.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - karellen-stack-core 0.0.1.dev20161001024730 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

abtests (>=0.0.1, <=0.0.2.1), scikit-build (0.4.0) potentially affected by CVE-2025-47273 via setuptools (28.3.0)

setuptools PYPI version 28.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - abtests =0.0.1, =0.0.2.1 - scikit-build 0.4.0 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

coala (>=0.9.0.dev20161126232915, <=0.10.0.dev20161128021310) potentially affected by CVE-2025-47273 via setuptools (28.8.1)

setuptools PYPI version 28.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - coala =0.9.0.dev20161126232915, =0.10.0.dev20161128021310 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

python-mu (>=1.0.1, <=1.0.3) potentially affected by CVE-2025-47273 via setuptools (18.4.0)

setuptools PYPI version 18.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - python-mu =1.0.1, =1.0.3 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

coala (>=0.3.0.dev20151230202701, <=0.4.1.dev20160217212532), igitt (>=0.1.0.dev20160122122211, <=0.2.0.dev20160125152641) +1 more potentially affected by CVE-2025-47273 via setuptools (19.2.0)

setuptools PYPI version 19.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - coala =0.3.0.dev20151230202701, =0.1.0.dev20160122122211, =0.1.0, =0.1.1 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

ngsqc (0.1.1) potentially affected by CVE-2025-47273 via setuptools (20.2.2)

setuptools PYPI version 20.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - ngsqc 0.1.1 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

clean-cybersource-rest-client-python (>=0.0.19, <=0.0.22), ozon-api-client (0.1.10) +2 more potentially affected by CVE-2025-47273 via setuptools (21.0.0)

setuptools PYPI version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - clean-cybersource-rest-client-python =0.0.19, =3.8.0, =3.9.0 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

mindsdb (0.8.9.3), uranium (>=0.2.35, <=1.1.0) potentially affected by CVE-2025-47273 via setuptools (21.2.1)

setuptools PYPI version 21.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - mindsdb 0.8.9.3 - uranium =0.2.35, =1.1.0 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

scikit-build (0.2.0) potentially affected by CVE-2025-47273 via setuptools (25.0.0)

setuptools PYPI version 25.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - scikit-build 0.2.0 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

maccabistats (>=1.2.0, <=2.9.3) potentially affected by CVE-2025-47273 via setuptools (28.8.0)

setuptools PYPI version 28.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - maccabistats =1.2.0, =2.9.3 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

acsoo (>=1.6.0, <=3.0.1), pex (>=1.1.16, <=1.1.20) potentially affected by CVE-2025-47273 via setuptools (30.4.0)

setuptools PYPI version 30.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - acsoo =1.6.0, =1.1.16, =1.1.20 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

fdc-shared-kernel (>=0.0.3, <=0.0.206) potentially affected by CVE-2025-47273 via setuptools (71.0.0)

setuptools PYPI version 71.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - fdc-shared-kernel =0.0.3, =0.0.206 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

fedlearner (>=1.5.0.dev20210429, <=1.5.0.dev20210512), fedlearner-manylinux (1.5.0.dev20210429) +4 more potentially affected by CVE-2025-47273 via setuptools (41.0.0)

setuptools PYPI version 41.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - fedlearner =1.5.0.dev20210429, =0.0.1, =0.0.3, =0.0.1, =0.0.2 - toskose 0.1.0 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-4...

PYSEC-2025-49

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

CVE-2025-47273

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

UBUNTU-CVE-2025-47273

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

CVE-2025-47273 setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

CVE-2025-47273

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in "PackageIndex" is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem wi...